Skip to content
OpenAdvisories
High WID-SEC-2026-0902 10 CVEs

Fleet: Mehrere Schwachstellen

Published Mar 29, 2026 · Updated Mar 29, 2026 · de-DE

Platform: Linux

Summary

Ein Angreifer kann mehrere Schwachstellen in Fleet ausnutzen, um einen SQL-Injection Angriff durchzuführen, um einen Denial of Service Angriff durchzuführen, um Sicherheitsvorkehrungen zu umgehen, um Informationen offenzulegen, und um beliebigen Programmcode mit Administratorrechten auszuführen.

Product

Fleet ist eine Open-Source-Plattform zur Geräteverwaltung, die es Unternehmen ermöglicht, ihre Infrastruktur zu überwachen und zu sichern.

Vulnerabilities 10

  • High 8.7
    CVE-2026-26061

    Fleet's unbounded request body read allows remote Denial of Service

    Fleet is open source device management software. Prior to 4.81.0, Fleet contained multiple unauthenticated HTTP endpoints that read request bodies without enforcing a size limit. An unauthenticated attacker could exploit this behavior by sending large or repe…

    fleetdm fleet github.com/fleetdm/fleet/v4 Go
  • Medium 6.6
    CVE-2026-34388

    Fleet vulnerable to Denial of Service via unhandled gRPC log type in launcher endpoint

    Fleet is open source device management software. Prior to 4.81.0, a denial-of-service vulnerability in Fleet's gRPC Launcher endpoint allows an authenticated host to crash the entire Fleet server process by sending an unexpected log type value. The server ter…

    fleetdm fleet github.com/fleetdm/fleet/v4 Go
  • Medium 6.6
    CVE-2026-34391

    Fleet Vulnerable to Windows MDM cross-device command disclosure

    Fleet is open source device management software. Prior to 4.81.1, a vulnerability in Fleet's Windows MDM command processing allows a malicious enrolled device to access MDM commands intended for other devices, potentially exposing sensitive configuration data…

    fleetdm fleet
  • Medium 6.3
    CVE-2026-34386

    Fleet vulnerable to SQL injection in MDM bootstrap package by authenticated team or global admin

    Fleet is open source device management software. Prior to 4.81.0, a SQL injection vulnerability in Fleet's MDM bootstrap package configuration allows an authenticated user with Team Admin or Global Admin privileges to modify arbitrary team configurations, exf…

    fleetdm fleet github.com/fleetdm/fleet/v4 Go
  • Medium 6.2
    CVE-2026-34385

    Fleet's Apple MDM profile delivery has second-order SQL injection that can compromise the database

    Fleet is open source device management software. Prior to 4.81.0, a second-order SQL injection vulnerability in Fleet's Apple MDM profile delivery pipeline could allow an attacker with a valid MDM enrollment certificate to exfiltrate or modify the contents of…

    fleetdm fleet github.com/fleetdm/fleet/v4 Go
  • Medium 6.0
    CVE-2026-26060

    Fleet: Password reset tokens remain valid after password change for 24 hours

    Fleet is open source device management software. Prior to 4.81.0, a vulnerability in Fleet’s password management logic could allow previously issued password reset tokens to remain valid after a user changes their password. As a result, a stale password reset…

    fleetdm fleet github.com/fleetdm/fleet/v4 Go
  • Medium 5.7
    CVE-2026-34387

    Fleet vulnerable to OS command injection via crafted software package metadata in uninstall scripts

    Fleet is open source device management software. Prior to 4.81.1, a command injection vulnerability in Fleet's software installer pipeline allows an attacker to achieve arbitrary code execution as root (macOS/Linux) or SYSTEM (Windows) on managed hosts when a…

    fleetdm fleet
  • Medium 5.1
    CVE-2026-26186

    Fleet has a SQL injection via backtick escape in ORDER BY parameter

    Fleet is open source device management software. A SQL injection vulnerability in versions prior to 4.80.1 allowed authenticated users to inject arbitrary SQL expressions via the `order_key` query parameter. Due to unsafe use of `goqu.I()` when constructing t…

    fleetdm fleet github.com/fleetdm/fleet/v4 Go
  • Medium 4.9
    CVE-2026-29180

    Fleet's team maintainer can transfer hosts from any team via missing source team authorization

    Fleet is open source device management software. Prior to 4.81.1, a broken access control vulnerability in Fleet's host transfer API allows a team maintainer to transfer hosts from any team into their own team, bypassing team isolation boundaries. Once transf…

    fleetdm fleet github.com/fleetdm/fleet/v4 Go
  • Medium 4.9
    CVE-2026-34389

    Fleet's user account creation via invite does not enforce invited email address

    Fleet is open source device management software. Prior to 4.81.0, Fleet contained an issue in the user invitation flow where the email address provided during invite acceptance was not validated against the email address associated with the invite. An attacke…

    fleetdm fleet github.com/fleetdm/fleet/v4 Go

Revision history

  1. #1

    Initiale Fassung

References