Read the docs
TI-2026-65078 Aliases CVE-2026-101045GHSA-v4vj-w767-q8qv

Fleet Homebrew Cask OS Command Injection via Metadata

Priority MEDIUM 42CWE-78Published · Updated

Key facts

Attack vector
Network
Privileges required
High
User interaction
None
Attack complexity
High
Attack requirements
Present
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-78.

Summary

Fleet-maintained app install and uninstall scripts for macOS are generated from Homebrew cask metadata. In manifests generated before 2026-08-19, the script generator escaped this metadata at some interpolation sites but not all of them, so cask metadata containing shell metacharacters (for example $(...) command substitution) could be carried into scripts that execute as root on managed macOS hosts. An attacker who could land crafted metadata in an upstream Homebrew cask — without needing any Fleet credentials — could achieve arbitrary command execution as root on managed macOS hosts that install or uninstall the affected Fleet-maintained app; exploitation required the crafted metadata to pass both upstream Homebrew cask review and Fleet's review of the automated ingestion pull request. The fix (fleetdm/fleet#51324) landed in Fleet's ingestion pipeline on 2026-08-19 so that all manifests generated on or after that date escape cask metadata at every interpolation site; because manifests are generated centrally and distributed as pre-built content, remediation applied to all deployments with no customer action, and the code fix is included in Fleet v4.92.0.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0075 55th percentileScored 2026-11-07
Fix Fixed fleet (fleetdm): 2026-08-19

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
fleetdmfleetbefore 2026-08-192026-08-19Patch availableCNA
  • fleet Vendorfleetdm Affected before 2026-08-19 Fixed in 2026-08-19 Patch available CNA

CPE names Threatist (inferred) · 1

Inferred from how NVD named this product before; not given by a source.

CPEVersionsRoleVendor
cpe:2.3:a:fleetdm:fleet:*:*:*:*:*:*:*:*——fleetdm
  • cpe:2.3:a:fleetdm:fleet:*:*:*:*:*:*:*:* Versions — — ·fleetdm

Remediation

  • Fix · CNA fleet (fleetdm) Fixed in 2026-08-19

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-101045
  2. 2026-10-03 Alias added: GHSA-v4vj-w767-q8qv

References

Advisory 1

  • TI-2026-29868 Fleet: Cross-Team Policy Data Exposure via Global Policy Read Endpoint CVSS 3.1MEDIUM 4.3
  • TI-2025-20341 SAML authentication vulnerability due to improper SAML response validation CVSS 4.0CRITICAL 9.3
  • TI-2026-65639 Fleet before 4.87.0 Authentication Bypass via Device Identifiers CVSS 4.0CRITICAL 9.3
  • TI-2026-18942 Fleet has a JWT signature bypass vulnerability in Azure AD MDM enrollment CVSS 4.0CRITICAL 9.3
  • TI-2020-16097 SAML authentication vulnerability in Fleet CVSS 3.1CRITICAL 10.0
  • TI-2026-76130 Unbounded gzip decompression in Fleet enables denial of service CVSS 4.0HIGH 8.7
See all 40 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences