https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 20:06:27 +0000 https://cve.radiocsirt.org/vuln/cve-2026-27806 <p><strong>Affected:</strong> fleetdm fleet</p> <p>Fleet is open source device management software. Prior to 4.81.1, the Orbit agent&#39;s FileVault disk encryption key rotation flow on collects a local user&#39;s password via a GUI dialog and interpolates it directly into a Tcl/expect script executed via exec.Command(&#34;expect&#34;, &#34;-c&#34;, script). Because the password is inserted into Tcl brace-quoted send {%s}, a password containing } terminates the literal and injects arbitrary Tcl commands. Since Orbit runs as root, this allows a local unprivileged user to escalate to root privileges. This vulnerability is fixed in 4.81.1.</p> <p><strong>Affected:</strong> fleetdm fleet</p> <p>Fleet is open source device management software. Prior to 4.81.1, the Orbit agent&#39;s FileVault disk encryption key rotation flow on collects a local user&#39;s password via a GUI dialog and interpolates it directly into a Tcl/expect script executed via exec.Command(&#34;expect&#34;, &#34;-c&#34;, script). Because the password is inserted into Tcl brace-quoted send {%s}, a password containing } terminates the literal and injects arbitrary Tcl commands. Since Orbit runs as root, this allows a local unprivileged user to escalate to root privileges. This vulnerability is fixed in 4.81.1.</p> https://cve.radiocsirt.org/vuln/cve-2026-27806