Vulnerability in fleetdm fleet

[ Description ]Official description

Fleet before 4.89.0 contains an unbounded recursion vulnerability in Apple MDM enrollment property list parsing that allows unauthenticated attackers to crash the server. Attackers can send a crafted binary plist payload of about 150 bytes to the enrollment endpoints, triggering exponential allocation or infinite recursion that exhausts CPU and memory.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

• BSI CERT-Bund18 Oct 2026WID-SEC-2026-4023

  Fleet: Multiple vulnerabilities allow denial of service Translated from German

  CVE-2026-111924CVE-2026-111923

[ References ]References

• github.com/fleetdm/fleet/security/advisories/GHSA-x467-vgxf-2g6h
• www.vulncheck.com/advisories/fleet-before-4.89.0-unauthenticated-dos-via-apple-mdm-enro…