Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
fleetdm/fleet
main @ 8c544ea
162
Fixes
28
CVEs
CRITICAL
Peak severity
20.5%
Coverage
Highlights
Auth Bypass: 69 prior fixes. Scrutinize any change in this area.
server/service: most-fixed (10 issues). Treat as high-risk during review.
65 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: The project's authorization subsystem frequently failed to restrict multi-tenant scopes, allowing team-scoped observers or admins to access global entities or manage configurations outside their designated administrative boundaries. Rego policy checks required multiple patches to resolve cross-team leaks.
Command Injection: The software installer pipeline allowed unescaped package variables and metadata to propagate directly into shell scripts executing as root or SYSTEM on managed hosts, creating command injection vectors (CVE-2026-26191 and CVE-2026-34387).
SQL Injection: Several dynamic database endpoints constructed queries by concatenating raw, unsanitized client inputs or sort-key parameters into SQL strings, allowing blind SQL injection attacks (CVE-2026-26186).