https://github.com/Pig-Tail

Cluster identity takeover in Fleet cluster registration allows access to another cluster's Fleet namespace

Path traversal in Fleet Helm valuesFiles allows disclosure of files outside the bundle directory

Cross-tenant BundleDeployment and Secret disclosure via spoofed cluster labels during agent-initiated registration in Fleet

Unauthenticated GitRepo Spec Mutation via Fleet Git Webhook Receiver

Rancher: Ownership-less ClusterRole overwrite via attacker-controlled cr-name annotation on GlobalRole