https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 11:32:55 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-75033 <p>A flaw was found in Rancher Manager. Project Secrets were propagated into a namespace based only on its `field.cattle.io/projectId` annotation, without verifying that the referenced project belonged to the same downstream cluster. A user able to create namespaces on one cluster could set the annotation to a project ID from another cluster and have that project&#39;s secrets copied into a namespace under their control.</p> <p>This issue affects Rancher: before 2.15.1.</p> <p>A flaw was found in Rancher Manager. Project Secrets were propagated into a namespace based only on its `field.cattle.io/projectId` annotation, without verifying that the referenced project belonged to the same downstream cluster. A user able to create namespaces on one cluster could set the annotation to a project ID from another cluster and have that project&#39;s secrets copied into a namespace under their control.</p> <p>This issue affects Rancher: before 2.15.1.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-75033