Description
Fleet before 4.89.0 contains an unbounded recursion vulnerability in Apple MDM enrollment property list parsing that allows unauthenticated attackers to crash the server. Attackers can send a crafted binary plist payload of about 150 bytes to the enrollment endpoints, triggering exponential allocation or infinite recursion that exhausts CPU and memory.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| fleetdm | fleet | < 4.89.0 | 4.89.0 |
Advisories 1
- WID-SEC-2026-4023 Fleet: Mehrere Schwachstellen ermöglichen Denial of Service BSI CERT-Bund (WID) · Oct 18, 2026
References
- GitHub Security Advisory (GHSA-x467-vgxf-2g6h) vendor-advisory
- VulnCheck Advisory: Fleet before 4.89.0 Unauthenticated DoS via Apple MDM Enrollment Plist Parsing third-party-advisory