{"id":"CVE-2026-104615","aliases":[],"cve":{"records":[{"id":"CVE-2026-104615","source":"suse","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-10-02T04:18:56.078Z","published":"2026-10-30T15:49:01.402Z","modified":"2026-10-30T15:49:01.402Z"}],"publishers":[{"name":"suse","role":"CNA","organizationId":"404e59f5-483d-4b8a-8e7a-e67604dd8afb","modified":"2026-10-30T15:49:01.402Z"}],"references":[{"url":"https://github.com/rancher/fleet/security/advisories/GHSA-gx8v-2929-9q95","tags":["vendor-advisory"],"source":"suse"}],"weaknesses":[{"id":"CWE-290","description":"CWE-290 Authentication bypass by spoofing","source":"suse"}],"applicability":[{"source":"suse","statements":[{"operator":"OR","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:suse:rancher:*:*:*:*:*:*:*:*","versionStartIncluding":"0.16.0","versionEndExcluding":"0.16.3"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:rancher:*:*:*:*:*:*:*:*","versionStartIncluding":"0.15.0.","versionEndExcluding":"0.15.17"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:rancher:*:*:*:*:*:*:*:*","versionStartIncluding":"0.14.0","versionEndExcluding":"0.14.12"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:rancher:*:*:*:*:*:*:*:*","versionStartIncluding":"0.13","versionEndExcluding":"0.13.17"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:rancher:*:*:*:*:*:*:*:*","versionStartIncluding":"0","versionEndIncluding":"0.12"}]}]}]}],"prioritization":[]},"title":"Cluster identity takeover in Fleet cluster registration allows access to another cluster's Fleet namespace","titleSource":"suse","descriptionSource":"suse","description":"A security vulnerability was discovered in SUSE Rancher Fleet's cluster registration flow, in Fleet versions before 0.12, 0.13.0 up to 0.13.17, 0.14.0 up to 0.14.12, 0.15.0 up t o 0.15.17 and 0.16.0 up to 0.16.3. The cluster identity claimed by a registration request was accepted without being bound to the registration token that the request was made with. As a result, a registration request could be associated with a managed cluster that was originally registered with a different registration token.","score":7.9,"severity":"high","published":"2026-10-30T15:49:01.402Z","modified":"2026-10-30T15:49:01.402Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"SUSE","name":"Rancher","platforms":[],"versions":[{"version":"0.16.0","status":"affected","lessThan":"0.16.3","versionType":"semver"},{"version":"0.15.0.","status":"affected","lessThan":"0.15.17","versionType":"semver"},{"version":"0.14.0","status":"affected","lessThan":"0.14.12","versionType":"semver"},{"version":"0.13","status":"affected","lessThan":"0.13.17","versionType":"semver"},{"version":"0","status":"affected","lessThanOrEqual":"0.12","versionType":"semver"}],"defaultStatus":"unaffected","cpes":[],"source":"suse","url":"https://www.cve.org/CVERecord?id=CVE-2026-104615"}],"remediation":[],"references":["https://github.com/rancher/fleet/security/advisories/GHSA-gx8v-2929-9q95"],"sources":[{"name":"CVE","id":"CVE-2026-104615","modified":"2026-10-30T15:49:01.402Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-104615"}],"assessments":[{"source":"suse","vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:H","score":7.9}],"sourceAffected":[],"observedAt":"2026-10-30T17:19:56.968Z","kev":{"status":"not-listed","checkedAt":"2026-10-31T04:10:31.776Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[],"aiSummary":null}