The Fleet agent in Rancher Manager writes resources to downstream clusters using its own cluster‑admin credentials instead of the ServiceAccount pinned to the deployment. This privilege misuse permits an attacker who can create or modify Fleet resources to write arbitrary objects into any namespace of a downstream cluster, potentially overwriting configuration files and other critical objects. The flaw is a classic example of privileged account misuse, identified as CWE‑250.

SUSE Rancher Fleet versions 0.16 before 0.16.2, 0.15 before 0.15.7, and 0.14 before 0.14.11 running in multi‑tenant environments where different tenants share the same downstream clusters. Each affected instance may allow untrusted tenants to write resources in other tenants’ namespaces.

With a CVSS score of 8.8 this vulnerability is considered high severity. The EPSS score is not available and the issue is not listed in CISA KEV, yet the potential impact is substantial. An attacker who can create or modify Fleet definitions can exploit the privileged Fleet agent to perform cross‑namespace writes without needing direct credentials to the downstream cluster. The attack vector is largely authenticated against the Rancher Manager; the exploitation step requires manipulating Fleet manifests to trigger the privileged write operation.