Lucene search
+L

1 matches found

osv_ghsa
osv_ghsa
•added 2026/01/20 8:55 p.m.•32 views

GHSA-4R5R-CCR6-Q6F6 Fleet has an Access Control vulnerability in debug/pprof endpoints

Summary A broken access control issue in Fleet allowed authenticated users to access debug and profiling endpoints regardless of role. As a result, low-privilege users could view internal server diagnostics and trigger resource-intensive profiling operations. Impact Fleet’s debug/pprof endpoints...

7.1CVSS7.9AI score0.00292EPSS
SaveExploits0References5
Rows per page
Query Builder