{"id":"CVE-2021-21296","title":"Fleet is an open source osquery manager","summary":"Fleet is an open source osquery manager. In Fleet before version 3.7.0 a malicious actor with a valid node key can send a badly formatted request that causes the Fleet server to exit, resulting in denial of service. This is possible only…","severity":"low","cvss":2.7,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-400"],"vendor":"fleetdm","product":"fleet","affected":["fleet < 3.7.0"],"patched":["fleet 3.7.0"],"published":"2021-02-10","updated":"2026-10-06","sourceUpdated":"2026-10-06T14:18:40.287","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2021-21296","references":[{"url":"https://github.com/fleetdm/fleet/commit/f68f4238e83b45b2164e4ed05df14af0f06eaf40","label":"security-advisories@github.com"},{"url":"https://github.com/fleetdm/fleet/security/advisories/GHSA-xwh8-9p3f-3x45","label":"security-advisories@github.com"},{"url":"https://www.npmjs.com/package/fleetctl","label":"security-advisories@github.com"},{"url":"https://github.com/fleetdm/fleet/commit/f68f4238e83b45b2164e4ed05df14af0f06eaf40","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/fleetdm/fleet/security/advisories/GHSA-xwh8-9p3f-3x45","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.npmjs.com/package/fleetctl","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd"],"epss":0.01941,"epssPercentile":0.79437,"ingestedAt":"2026-10-06T15:01:49.260Z","slug":"CVE-2021-21296","body":"## Overview\n\nFleet is an open source osquery manager. In Fleet before version 3.7.0 a malicious actor with a valid node key can send a badly formatted request that causes the Fleet server to exit, resulting in denial of service. This is possible only while a live query is currently ongoing. We believe the impact of this vulnerability to be low given the requirement that the actor has a valid node key. There is no information disclosure, privilege escalation, or code execution. The issue is fixed in Fleet 3.7.0.\n\n## Affected\n\n- `fleet < 3.7.0`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `fleet 3.7.0`","depth":"sunlit","depthScore":15,"depthScoreParts":{"impact":14.9,"likelihood":0.4,"exploitation":0,"ransomware":0},"changes":[]}