Go/github.com/fleetdm/fleet/v4 CVE-2025-27509: critical 9.3, EPSS 0.67%
Fleet has SAML authentication vulnerability due to improper SAML response validation in github.com/fleetdm/fleet
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GO-2025-3505
- nvd: CVE-2025-27509
- https://github.com/fleetdm/fleet/security/advisories/GHSA-52jx-g6m5-h735
- https://github.com/fleetdm/fleet/commit/718c95e47ad010ad6b8ceb3f3460e921fbfc53bb
- https://github.com/fleetdm/fleet/releases/tag/fleet-v4.64.2
CVE-2025-27509 · published · modified · JSON