CVE-2026-72670

Name of the Vulnerable Software and Affected Versions Fleet (affected versions not specified)

Description A user with low privileges, specifically those only authorized to read agent policies, can access the complete configuration of a configured Fleet proxy. This action typically requires the Fleet privilege to read settings. The exposed proxy configuration may include sensitive data such as proxy authentication credentials and private key material.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.