{"id":"EUVD-2026-42039","revision":"79f207ba89d74dbd8d2247e927ca4266","records":[{"revision":"79f207ba89d74dbd8d2247e927ca4266","observedAt":"2026-10-28T06:09:38.788+00:00","statement":{"source":"euvd","id":"EUVD-2026-42039","aliases":["CVE-2026-44938","GHSA-864g-863m-vcvq"],"title":"A vulnerability has been identified in Fleet's agent-side deployer, which did not filter security-sensitive keys from namespaceLabels in fleet.yaml (or BundleDeployment.spec.options.namespaceLabels) when applying them to the target namespac…","description":"A vulnerability has been identified in Fleet's agent-side deployer, which did not filter security-sensitive keys from namespaceLabels in fleet.yaml (or BundleDeployment.spec.options.namespaceLabels) when applying them to the target namespace.\n\n\n\n\nAn attacker with git push access to a\n Fleet-monitored repository could overwrite Pod Security Standards (PSS)\n enforcement labels on a target namespace. This allows the attacker to \nweaken admission controls and deploy workloads that PSS policies would \notherwise block.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","score":8.8,"severity":null}],"references":["https://bugzilla.suse.com/show_bug.cgi?id=CVE-2026-44938","https://github.com/advisories/GHSA-864g-863m-vcvq"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-42039","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Jul 7, 2026, 1:05:03 PM","dateUpdated":"Jul 8, 2026, 3:56:44 AM"},"relatedAdvisories":[],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2026-42039","identifiers":["EUVD-2026-42039","CVE-2026-44938","GHSA-864g-863m-vcvq"]},"retained":false,"historicalAffected":[]}],"coverage":[]}