tocsin

Go/github.com/rancher/fleet CVE-2025-23390: medium 6.3, EPSS 0.19%

Fleet doesn’t validate a server’s certificate when connecting through SSH

Action: Upgrade github.com/rancher/fleet to 0.10.12 or later.

go get github.com/rancher/fleet@v0.10.12
go get github.com/rancher/fleet@v0.11.7
go get github.com/rancher/fleet@v0.12.2

Affected

introducedfixedlast affected
0.9.0-rc.10.10.12-
0.11.00.11.7-
0.12.00.12.2-

Fixed versions

0.10.120.11.70.12.2

Sources

CVE-2025-23390 · published · modified · JSON