blob: 8b956bd17379fa14bde10f379ab5b3cba8b61145 [file]
id: GO-2026-5812
modules:
- module: github.com/fleetdm/fleet/v4
versions:
- fixed: 4.85.0
vulnerable_at: 4.84.3
summary: |-
Fleet DM Vulnerable to Cross-Team Policy Data Exposure via Global Policy Read
Endpoint in github.com/fleetdm/fleet
cves:
- CVE-2026-41262
ghsas:
- GHSA-gm7f-v959-fr2g
references:
- advisory: https://github.com/fleetdm/fleet/security/advisories/GHSA-gm7f-v959-fr2g
source:
id: GHSA-gm7f-v959-fr2g
created: 2026-07-07T00:12:10.864018624-04:00
review_status: UNREVIEWED