Go/github.com/fleetdm/fleet/v4 CVE-2026-46371: unknown, EPSS 0.37%

Fleet: Observer-level enrollment secret extraction via ORDER BY oracle on Apple MDM commands endpoint in github.com/fleetdm/fleet

Action: Upgrade github.com/fleetdm/fleet/v4 to 4.84.2 or later.

go get github.com/fleetdm/fleet/v4@v4.84.2

Affected

Fixed versions

Sources

• osv: GO-2026-5739
• https://github.com/fleetdm/fleet/security/advisories/GHSA-x4qr-qw6h-wvxq

CVE-2026-46371 · published 2026-06-25T22:34:38Z · modified 2026-06-25T23:01:42.701946939Z · JSON