Go/github.com/fleetdm/fleet/v4 CVE-2026-23998: high 7.5, EPSS 0.21%

Fleet has a Windows MDM management endpoint authentication bypass

Action: Upgrade github.com/fleetdm/fleet/v4 to 4.81.0 or later.

go get github.com/fleetdm/fleet/v4@v4.81.0

Affected

Fixed versions

Sources

• osv: GHSA-2rc4-7jc6-qffh
• https://github.com/fleetdm/fleet/security/advisories/GHSA-2rc4-7jc6-qffh
• https://nvd.nist.gov/vuln/detail/CVE-2026-23998
• https://github.com/fleetdm/fleet/commit/3ff8119ab8f794806a4cc82e21f760c123d92966
• https://github.com/fleetdm/fleet
• https://github.com/fleetdm/fleet/releases/tag/fleet-v4.81.0

CVE-2026-23998 · published 2026-05-14T13:13:11Z · modified 2026-06-08T23:45:19.172964221Z · JSON