CVE-2025-27509

2 advisories.

Go/github.com/fleetdm/fleet/v4 CVE-2025-27509: critical 9.3, EPSS 0.67%

Fleet has SAML authentication vulnerability due to improper SAML response validation

Action: Upgrade github.com/fleetdm/fleet/v4 to 4.53.2 or later.

go get github.com/fleetdm/fleet/v4@v4.64.2

go get github.com/fleetdm/fleet/v4@v4.63.2

go get github.com/fleetdm/fleet/v4@v4.62.4

go get github.com/fleetdm/fleet/v4@v4.58.1

go get github.com/fleetdm/fleet/v4@v4.53.2

4.64.2

4.63.2

4.62.4

4.58.1

4.53.2

CVE-2025-27509 · published 2025-03-06T19:12:27Z · modified 2026-02-03T03:11:21.791693Z · JSON

Fleet has SAML authentication vulnerability due to improper SAML response validation in github.com/fleetdm/fleet

Action: No fix published. Pin and monitor.

introduced	fixed	last affected
0	-	-

No fixed version in the source.

CVE-2025-27509 · published 2025-03-10T19:01:10Z · modified 2025-03-10T19:27:00.912405Z · JSON