PT-2026-28629

CVE-2026-34388

·

Published

2026-03-27

·

Updated

2026-07-30

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Fleet versions prior to 4.81.0
Description Fleet, an open-source device management software, contains a flaw in its gRPC Launcher endpoint. An authenticated host can exploit this to cause a denial-of-service condition, leading to the termination of the entire Fleet server process. This disruption impacts all connected hosts, Mobile Device Management (MDM) enrollments, and API consumers by sending an unexpected log type value to the gRPC Launcher endpoint.
Recommendations Update to version 4.81.0 or later.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
GHSA-W254-4HP5-7CVV
GO-2026-4915
OPENSUSE-SU-2026:21483-1
SUSE-SU-2026:1205-1
Found an issue in the description? Have something to add? Feel free to write us 👾