Vulnerabilities
Report: CVE-2026-41050 - Helm impersonation bypass of `RESTClientGetter` retains `cluster-admin` during t
CVE ID :CVE-2026-41050 Published : May 13, 2026, 8:04 a.m. | 1 hour, 27 minutes ago Description :Fleet's Helm deployer did not fully apply ServiceAccount impersonation in two code paths, allowing a tenant with git push access to a Fleet-monitored repository to read secrets from any namespace on every downstream cluster targeted by their `GitRepo`. Severity: 9.9 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...