The Fleet agent deployer fails to filter security-sensitive keys from the namespaceLabels field in fleet.yaml or BundleDeployment.spec. An attacker with write access to a Fleet‑monitored Git repository can insert or overwrite Pod Security Standards (PSS) enforcement labels on an arbitrary namespace. This manipulation weakens the admission controls that normally block non‑conforming workloads, allowing the attacker to deploy pods that would otherwise be rejected. The flaw corresponds to CWE‑522, an inadequate protection of credentials or sensitive information, exposed through improper label handling.

The issue affects any installation of the Fleet Agent that uses the default agent logic without sanitization of namespaceLabels. Specific product versions are not listed, so the vulnerability is presumed to apply to all current releases until a patched version is released. The primary impacted vendor is SUSE Rancher, as it operates the Fleet Agent platform.

The CVSS score of 8.8 classifies the vulnerability as high severity, while the EPSS score of less than 1% indicates a very low but non‑zero likelihood of exploitation. The vulnerability is not yet listed in the CISA KEV catalog. Exploitation requires only git‑push rights to a Fleet‑monitored repository, which many teams grant to developers. Consequently, the risk is high in environments where repository write access is broad, as the attacker can bypass PSS controls and introduce malicious workloads.