Skip to content
OpenAdvisories

Product · fleetdm

fleet

41 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2025-27509 Public exploit

    SAML authentication vulnerability due to improper SAML response validation

    fleetdm/fleet is an open source device management, built on osquery. In vulnerable versions of Fleet, an attacker could craft a specially-formed SAML response to forge authentication assertions, provision a new administrative user account if Just-In-Time (JIT…

    fleetdm fleet github.com/fleetdm/fleet/v4 Go