HIGHVulnerability
Verified
Global
NVD HIGH: CVE-2026-34391 — Fleet is open source device management software. Prior to 4.81.1, a vulnerabilit...
Friday, March 27, 2026 at 08:16 PM UTC·Source: NIST NVD
Updated: Friday, April 3, 2026 at 02:38 AM UTC
Executive Summary
Fleet is open source device management software. Prior to 4.81.1, a vulnerability in Fleet's Windows MDM command processing allows a malicious enrolled device to access MDM commands intended for other devices, potentially exposing sensitive configuration data such as WiFi credentials, VPN secrets, and certificate payloads across the entire Windows fleet. Version 4.81.1 patches the issue.
Analysis
Fleet is open source device management software. Prior to 4.81.1, a vulnerability in Fleet's Windows MDM command processing allows a malicious enrolled device to access MDM commands intended for other devices, potentially exposing sensitive configuration data such as WiFi credentials, VPN secrets, and certificate payloads across the entire Windows fleet. Version 4.81.1 patches the issue.
CVSS Score: 7.5. Published: 2026-03-27T20:16:36.113.