Fleetdm

Fleet is an open-source device management and osquery endpoint visibility platform that, despite a narrow product portfolio, occupies a prominent position in the endpoint security and compliance tooling landscape. Vulnerabilities affecting the vendor skew toward serious outcomes, with a meaningful share reaching critical severity, and concentrate in the core Fleet product across a recurring pattern of authentication, authorization, and command-execution weakness classes including authentication bypass, OS command injection, SQL injection, and improper access control. These flaws reflect the inherent complexity of a centralized management system that handles credentials, orchestrates queries across heterogeneous endpoints, and exposes administrative interfaces. Defenders should treat Fleet instances as high-value targets requiring strong network isolation and prompt patching, as the platform's role in security instrumentation amplifies the impact of access-control failures. Current exploitation activity and exposure counts are shown alongside this summary.