SQL Injection in Fleetdm Fleet

CVE-2026-34385

Fleet is open source device management software. Prior to 4.81.0, a second-order SQL injection vulnerability in Fleet's Apple MDM profile delivery pipeline could allow an attacker with a valid MDM enrollment certificate to exfiltrate or mo…

Vulnerability class: SQL Injection

EPSS: 0.000 (1.0th percentile) — read the EPSS interpretation.