Vulnerability record · CVE-2026-34385 · published 27 March 2026

CVE-2026-34385: Fleetdm fleet sql injection vulnerability

Fleetdm · Fleet

Fleet is open source device management software. Prior to 4.81.0, a second-order SQL injection vulnerability in Fleet's Apple MDM profile delivery pipeline could allow an attacker with a valid MDM enrollment certificate to exfiltrate or modify the contents of the Fleet database, including user credentials, API tokens, and device enrollment secrets. Version 4.81.0 patches the issue.

6.2 CVSS 4.0 Medium EPSS 0.25% · top 85.0% CWE-89 · SQL injection

6.2CVSS 4.0 base score

0.25%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

1References

17 Jun 2026Last modified by NVD

Description

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Fleet Fleetdm

References

Link	Tags
https://github.com/fleetdm/fleet/security/advisories/GHSA-v895-833r-8c45	Vendor Advisory

Track CVE-2026-34385 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2020-26276Fleetdm fleet authentication bypass by spoofing vulnerabilityFleet is an open source osquery manager. In Fleet before version 3.5.1, due to issues in Go's standard library XML parsing, a valid SAML response may…EPSS 2.2%17 Dec 2020 9.3CVE-2026-23518Fleetdm fleet improper verification of cryptographic signature vulnerabilityFleet is open source device management software. In versions prior to 4.78.3, 4.77.1, 4.76.2, 4.75.2, and 4.53.3, a vulnerability in Fleet's Windows …EPSS 0.26%21 Jan 2026 8.7CVE-2026-26062Fleetdm fleet improper input validation vulnerabilityFleet is open source device management software. Prior to version 4.81.0, Fleet contained a denial-of-service (DoS) issue in the gRPC Launcher `Publi…EPSS 0.54%14 May 2026 8.7CVE-2026-26061Fleetdm fleet allocation without limits vulnerabilityFleet is open source device management software. Prior to 4.81.0, Fleet contained multiple unauthenticated HTTP endpoints that read request bodies wi…EPSS 0.48%27 Mar 2026 8.2CVE-2026-24899Fleetdm fleet authentication bypass by spoofing vulnerabilityFleet is open source device management software. Prior to version 4.82.0, a vulnerability in Fleet's Windows MDM enrollment flow allows authenticatio…EPSS 0.38%14 May 2026 8.2CVE-2026-23998Fleetdm fleet improper certificate validation vulnerabilityFleet is open source device management software. Prior to version 4.81.0, a vulnerability in Fleet’s Windows MDM management endpoint could allow requ…EPSS 0.21%14 May 2026 8.1CVE-2022-24841Fleetdm fleet improper access control vulnerabilityfleetdm/fleet is an open source device management, built on osquery. All versions of fleet making use of the teams feature are affected by this autho…EPSS 0.85%18 Apr 2022 7.8CVE-2026-27806Fleetdm fleet os command injection vulnerabilityFleet is open source device management software. Prior to 4.81.1, the Orbit agent's FileVault disk encryption key rotation flow on collects a local u…EPSS 0.11%8 Apr 2026

Source: NIST National Vulnerability Database (record CVE-2026-34385), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.