CVE-2026-75036

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-75036

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-75036.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-75036

Aliases

GHSA-x9m6-xcjr-hpjp

Published

2026-09-03T15:15:25Z

Modified

2026-09-06T03:30:35Z

Severity

5.3 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N CVSS Calculator

Summary

Fleet: DNS exfiltration via Sprig getHostByName in fleet.yaml Helm template preprocessing

Details

A security vulnerability was discovered in Fleet's Helm template preprocessing where templates evaluated by the Fleet controller could reach network resources outside the management cluster. A user who can supply bundle content to a repository referenced by a GitRepo resource can cause the Fleet controller to:

Disclose cluster metadata available to the templating context.
Reveal information about hosts reachable from the controller's network position. Because the disclosure channel is name resolution, it may remain effective in environments where outbound traffic is otherwise restricted. The disclosed information is limited to values exposed to the Fleet templating context and to name resolution results. Integrity and availability of managed clusters are not affected.

This issue affects Fleet: from 0.12.0 before 0.12.19, from 0.13.0 before 0.13.15, from 0.14.0 before 0.14.10, from 0.15.0 before 0.15.6, and from 0.16.0 before 0.16.1.

Database specific

{
    "cna_assigner": "suse",
    "cwe_ids": [
        "CWE-1336",
        "CWE-918"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/75xxx/CVE-2026-75036.json"
}

References

Affected packages

Git / github.com/rancher/fleet

Affected ranges

Type

GIT

Repo

https://github.com/rancher/fleet

Events

Introduced

3d1fa6c06ff392c9fa66ca2f46831e2dae23bc16

Fixed

3d1766d5b737501e0386d25558ebc87da867f77a

Introduced

e0324f2d4c06dad05a298622a1276ea596367b6a

Fixed

bde240cf8eb3122dd2a7e65849e8e30e74d1bdff

Introduced

53de8d76a46c737f4b055dd1a7f2b7ac682537c5

Fixed

98e6b68903f0bd96c1c289838ffaaf27a4b54b1b

Introduced

c63dc4bb52acb88fea50fe1b5f20db7f3ca6c9d9

Fixed

ea6c08e5a3a77f34effe4136656acb88556ffd78

Introduced

c1a4325041578226f4f333b9f05d651ee4b03577

Fixed

5823543a3d33952b1c7868eb035ad8e15db420fc

Database specific

Show details

{
    "extracted_events": [
        {
            "introduced": "0.12.0"
        },
        {
            "fixed": "0.12.19"
        },
        {
            "introduced": "0.13.0"
        },
        {
            "fixed": "0.13.15"
        },
        {
            "introduced": "0.14.0"
        },
        {
            "fixed": "0.14.10"
        },
        {
            "introduced": "0.15.0"
        },
        {
            "fixed": "0.15.6"
        },
        {
            "introduced": "0.16.0"
        },
        {
            "fixed": "0.16.1"
        }
    ],
    "source": "AFFECTED_FIELD"
}

Affected versions

pkg/apis/v0.*

pkg/apis/v0.12.0

pkg/apis/v0.12.0-rc.5

pkg/apis/v0.12.1

pkg/apis/v0.12.1-beta.1

pkg/apis/v0.12.1-rc.1

pkg/apis/v0.12.12-rc.2

pkg/apis/v0.12.15

pkg/apis/v0.12.15-rc.2

pkg/apis/v0.12.15-rc.3

pkg/apis/v0.12.17

pkg/apis/v0.12.18

pkg/apis/v0.12.3

pkg/apis/v0.12.3-beta.1

pkg/apis/v0.12.3-rc.1

pkg/apis/v0.12.5

pkg/apis/v0.13.0

pkg/apis/v0.13.11

pkg/apis/v0.13.11-rc.1

pkg/apis/v0.13.11-rc.2

pkg/apis/v0.13.13

pkg/apis/v0.13.14

pkg/apis/v0.13.7

pkg/apis/v0.13.7-rc.1

pkg/apis/v0.13.7-rc.2

pkg/apis/v0.14.0

pkg/apis/v0.14.2

pkg/apis/v0.14.2-beta.1

pkg/apis/v0.14.2-rc.1

pkg/apis/v0.14.2-rc.2

pkg/apis/v0.14.6

pkg/apis/v0.14.6-rc.2

pkg/apis/v0.14.6-rc.3

pkg/apis/v0.14.8

pkg/apis/v0.14.9

pkg/apis/v0.15.0

pkg/apis/v0.15.2

pkg/apis/v0.15.2-rc.2

pkg/apis/v0.15.2-rc.3

pkg/apis/v0.15.4

pkg/apis/v0.15.5

pkg/apis/v0.16.0

pkg/apis/v0.16.1-beta.1

v0.*

v0.12.0

v0.12.0-rc.5

v0.12.1

v0.12.1-beta.1

v0.12.1-beta.2

v0.12.1-rc.1

v0.12.10

v0.12.10-rc.1

v0.12.11

v0.12.11-rc.1

v0.12.11-rc.2

v0.12.11-rc.3

v0.12.12

v0.12.12-rc.1

v0.12.12-rc.2

v0.12.13

v0.12.13-rc.1

v0.12.13-rc.2

v0.12.13-rc.3

v0.12.14

v0.12.14-beta.1

v0.12.14-beta.2

v0.12.14-beta.3

v0.12.14-beta.4

v0.12.14-rc.1

v0.12.14-rc.2

v0.12.15

v0.12.15-rc.1

v0.12.15-rc.2

v0.12.15-rc.3

v0.12.16

v0.12.16-rc.1

v0.12.17

v0.12.18

v0.12.18-rc.1

v0.12.18-rc.2

v0.12.2

v0.12.3

v0.12.3-beta.1

v0.12.3-rc.1

v0.12.4

v0.12.4-rc.1

v0.12.4-rc.2

v0.12.4-rc.3

v0.12.5

v0.12.5-rc.1

v0.12.6

v0.12.6-beta.1

v0.12.6-beta.2

v0.12.6-rc.1

v0.12.6-rc.2

v0.12.6-rc.3

v0.12.7

v0.12.7-rc.1

v0.12.7-rc.2

v0.12.8

v0.12.8-rc.1

v0.12.9

v0.12.9-beta.1

v0.12.9-beta.2

v0.12.9-rc.1

v0.12.9-rc.2

v0.13.0

v0.13.0-rc.4

v0.13.1

v0.13.1-beta.1

v0.13.1-beta.2

v0.13.1-rc.1

v0.13.1-rc.2

v0.13.1-rc.3

v0.13.1-rc.4

v0.13.1-rc.5

v0.13.1-rc.6

v0.13.10

v0.13.10-beta.1

v0.13.10-beta.2

v0.13.10-beta.3

v0.13.10-beta.4

v0.13.10-beta.5

v0.13.10-rc.1

v0.13.10-rc.2

v0.13.11

v0.13.11-rc.1

v0.13.11-rc.2

v0.13.12

v0.13.12-rc.1

v0.13.13

v0.13.14

v0.13.14-rc.1

v0.13.14-rc.2

v0.13.15-rc.1

v0.13.2

v0.13.2-rc.1

v0.13.2-rc.2

v0.13.3

v0.13.4

v0.13.4-rc.1

v0.13.4-rc.2

v0.13.5

v0.13.5-beta.1

v0.13.5-rc.1

v0.13.5-rc.2

v0.13.5-rc.3

v0.13.6

v0.13.6-beta.1

v0.13.6-rc.1

v0.13.7

v0.13.7-alpha.1

v0.13.7-alpha.2

v0.13.7-rc.1

v0.13.7-rc.2

v0.13.8

v0.13.8-rc.1

v0.13.9

v0.13.9-rc.1

v0.13.9-rc.3

v0.13.9-rc.4

v0.14.0

v0.14.1

v0.14.1-beta.1

v0.14.1-beta.2

v0.14.1-beta.3

v0.14.1-beta.4

v0.14.1-rc.1

v0.14.10-rc.1

v0.14.2

v0.14.2-beta.1

v0.14.2-rc.1

v0.14.2-rc.2

v0.14.3

v0.14.3-beta.1

v0.14.3-rc.1

v0.14.3-rc.2

v0.14.3-rc.3

v0.14.4

v0.14.4-beta.1

v0.14.4-beta.2

v0.14.4-rc.1

v0.14.4-rc.2

v0.14.4-rc.3

v0.14.4-rc.4

v0.14.4-rc.5

v0.14.5

v0.14.5-beta.1

v0.14.5-beta.2

v0.14.5-beta.3

v0.14.5-beta.4

v0.14.5-beta.5

v0.14.5-rc.1

v0.14.5-rc.2

v0.14.6

v0.14.6-rc.1

v0.14.6-rc.2

v0.14.6-rc.3

v0.14.7

v0.14.7-rc.1

v0.14.7-rc.2

v0.14.8

v0.14.9

v0.14.9-rc.1

v0.14.9-rc.2

v0.15.0

v0.15.0-rc.6

v0.15.1

v0.15.1-beta.1

v0.15.1-beta.2

v0.15.1-beta.3

v0.15.1-beta.4

v0.15.1-rc.1

v0.15.1-rc.2

v0.15.2

v0.15.2-rc.1

v0.15.2-rc.2

v0.15.2-rc.3

v0.15.3

v0.15.3-beta.1

v0.15.3-beta.2

v0.15.3-rc.1

v0.15.3-rc.2

v0.15.4

v0.15.5

v0.15.5-rc.1

v0.15.5-rc.2

v0.15.6-alpha.1

v0.16.0

v0.16.0-rc.5

v0.16.1-beta.1

v0.16.1-beta.2

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-75036.json"