Skip to content
OpenAdvisories

Package · Go

github.com/fleetdm/fleet

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.6
    CVE-2026-54245

    Fleet: SQL injection in Okta conditional access endpoint allows host-controlled compromise of the Fleet database

    Fleet is an open-source device management platform built on osquery. In versions prior to 4.86.2, the Okta conditional access integration in Fleet Premium is vulnerable to SQL injection through a host-supplied value that is used in a database query without pr…

    fleetdm fleet github.com/fleetdm/fleet/v4 github.com/fleetdm/fleet Go