High severity7.5NVD Advisory· Published Mar 27, 2026· Updated Apr 2, 2026
CVE-2026-34391
CVE-2026-34391
Description
Fleet is open source device management software. Prior to 4.81.1, a vulnerability in Fleet's Windows MDM command processing allows a malicious enrolled device to access MDM commands intended for other devices, potentially exposing sensitive configuration data such as WiFi credentials, VPN secrets, and certificate payloads across the entire Windows fleet. Version 4.81.1 patches the issue.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- github.com/fleetdm/fleet/security/advisories/GHSA-wg7j-pcc3-h4rhnvdVendor Advisory
News mentions
0No linked articles in our index yet.