CVE-2026-101045

Fleet-maintained app install and uninstall scripts for macOS are generated from Homebrew cask metadata. In manifests generated before 2026-08-19, the script generator escaped this metadata at some interpolation sites but not all of them, so cask metadata containing shell metacharacters for exampl...

CVE-2026-101045: Improper Neutralization of Special Elements used in an OS Command

Fleet-maintained app install and uninstall scripts for macOS are generated from Homebrew cask metadata. In manifests generated before 2026-08-19, the script generator escaped this metadata at some interpolation sites but not all of them, so cask metadata containing shell metacharacters for exampl...

PT-2026-99563

Name of the Vulnerable Software and Affected Versions Fleet versions prior to 4.92.0 Description Install and uninstall scripts for macOS apps are generated using Homebrew cask metadata. In manifests created before 2026-08-19, the script generator failed to escape metadata at all interpolation...