fleet-v4.77.1

Bug fixes

• Improved SOAP message validation on Windows MDM endpoints
• Revised auth requirements for /debug endpoints
• Added additional validation to URL parameter for MS MDM auth endpoint

Upgrading

Please visit our update guide for upgrade instructions.

Documentation

Documentation for Fleet is available at fleetdm.com/docs.

Binary Checksum

SHA256

5a1539267421acac859875336d94152ab6c659649725ae495f1a5e0a97503bb9  fleet_v4.77.1_linux.tar.gz
b68c9d0436ca0128d92e9e6af5f5d83925ccc3cdeba78715b3151ac80684bfd1  fleetctl_v4.77.1_linux_amd64.tar.gz
7a1f5edb85750c2f581c1309dbede560bef65cf05820b0478e507431aabc109d  fleetctl_v4.77.1_linux_amd64.zip
4011bb883ff02d53ade40c95f7ad211a6166bf9c46e0dd9dabe583c2de2eb417  fleetctl_v4.77.1_linux_arm64.tar.gz
f63d340e4ce9e19d05168d4440d8860143cb5d98b0def14a9cf11fb79df4bbb8  fleetctl_v4.77.1_linux_arm64.zip
b6e1912fb1ee05008e2f2c06f3fdcb79f732340295410f6f07bdcd82bbc3f86a  fleetctl_v4.77.1_macos.tar.gz
9880678982cb091eaab6bb6a45f8d836d84ba54c45552a08b1b4c5686dea64a1  fleetctl_v4.77.1_macos.zip
c8fad858ed2ed2c2cbc9cf2b4c44aec4783d9344397b1ef1c5175ce97535ffca  fleetctl_v4.77.1_windows_amd64.tar.gz
89d39214202318cea6d84420532e450405d2a9a0257fbaa67d328a6a1e3fe92f  fleetctl_v4.77.1_windows_amd64.zip
2c490a5fa1c5f88146d629ec5fa3fc40370da28d364f5a5337999a001408e443  fleetctl_v4.77.1_windows_arm64.tar.gz
134ea899c02016ad8263ef9293f8bc6d2aa13e0f00c28fdd69ccec3af5618e2e  fleetctl_v4.77.1_windows_arm64.zip

fleet-v4.78.3

Bug fixes

• Improved SOAP message validation on Windows MDM endpoints
• Revised auth requirements for /debug endpoints

Upgrading

Please visit our update guide for upgrade instructions.

Documentation

Documentation for Fleet is available at fleetdm.com/docs.

Binary Checksum

SHA256

c415edbbfed1899413a167b568a6d46b5c18b1dcfba3f01cc7f06dd11b843223  fleet_v4.78.3_linux.tar.gz
f60e70192d30521c2d0267b04582307870b076c9c5a143a8479228299f61fb4d  fleetctl_v4.78.3_linux_amd64.tar.gz
e12989fe35aa7a74aa170af1a1c724e40c443d994f4ea6e3e9678c7f0727796c  fleetctl_v4.78.3_linux_amd64.zip
ee90f4b54c4575a0b5bcf54220f042728cdbcbd98ea2816b24f4c220836e9b25  fleetctl_v4.78.3_linux_arm64.tar.gz
3afcee8aabecfe6d48f7ef7d55f9a5e09a6c994b8e15063da5e24343af257f64  fleetctl_v4.78.3_linux_arm64.zip
9b2b5cb49d7b3322604195ce2c2ddb8093095fbf4c046e646118ff2be2825c46  fleetctl_v4.78.3_macos.tar.gz
06cf74f32f954b4e92d08be52a41af58fce57d84870e76c7993fd05e7c371e94  fleetctl_v4.78.3_macos.zip
10dac64c64eda92350ea26aeacecefdd0705dd2273f5a73e5cfb7c172bd10be2  fleetctl_v4.78.3_windows_amd64.tar.gz
7d7f7a4092bd9c0b9448ed5df24e7e59849f66e77076509d5c6e2c2f270cd9be  fleetctl_v4.78.3_windows_amd64.zip
34401d28838941c83c1bb5a95a959ac0f0450d3f46f743f9c6c037f3e0054e17  fleetctl_v4.78.3_windows_arm64.tar.gz
6ea22ce52b5527b83d675409aa49468707897e58f5f965a704e3b4c5dc7ea8a2  fleetctl_v4.78.3_windows_arm64.zip

fleet-v4.76.2

Bug fixes

• Improved SOAP message validation on Windows MDM endpoints
• Revised auth requirements for /debug endpoints
• Added additional validation to URL parameter for MS MDM auth endpoint

Upgrading

Please visit our update guide for upgrade instructions.

Documentation

Documentation for Fleet is available at fleetdm.com/docs.

Binary Checksum

SHA256

788d533b7deb795848588b0e055b7308d84e32d2b87defd0cdcaab6f15e7b02d  fleet_v4.76.2_linux.tar.gz
b2a9de1b555cc94a32deed73897d8b473c394b3663569b94ed1b0809fe1ba8fb  fleetctl_v4.76.2_linux_amd64.tar.gz
6d9344d961c5b62687e96fd2b81cfcf87562559f0ea1ec02e72c9d4ee3f06a0f  fleetctl_v4.76.2_linux_amd64.zip
ce5fbea01eed04770b5f0cc82cfb980687373b1623c536644e2046ad16a2dd78  fleetctl_v4.76.2_linux_arm64.tar.gz
6412338e1308d4e709d931f67267186262566524a5b5a613a78797fceaf3803d  fleetctl_v4.76.2_linux_arm64.zip
8ec1815986dc497276c37230e6ce5277f77041430264d19886ce9cff31023e10  fleetctl_v4.76.2_macos.tar.gz
042b56ecb11910d235899a822b845f011b3c2604a447f0a1cfbb4c287e381ad5  fleetctl_v4.76.2_macos.zip
a80a816642677bb4c1dea430c65e28bbd0ab9b5c12ca665e5cb5c61d6820dc26  fleetctl_v4.76.2_windows_amd64.tar.gz
573e13aa6a9b6ec2fc74480b783995d2f5a4bffca2ad458928746b4284f856e4  fleetctl_v4.76.2_windows_amd64.zip
4914d26e0849376fb399fa0faaeab5fd29bd66ddef075aa6a7161afc8b191047  fleetctl_v4.76.2_windows_arm64.tar.gz
6f7d745e6e0b8b4815c92d6495db3807c7971c4fe2c98e5dd1f6d31286b9a300  fleetctl_v4.76.2_windows_arm64.zip

fleet-v4.75.2

Bug fixes

• Improved SOAP message validation on Windows MDM endpoints
• Revised auth requirements for /debug endpoints
• Added additional validation to URL parameter for MS MDM auth endpoint

Upgrading

Please visit our update guide for upgrade instructions.

Documentation

Documentation for Fleet is available at fleetdm.com/docs.

Binary Checksum

SHA256

f4a2912237059bbb782f519442406ae49285d5888f1d2c6692307c22d707e405  fleet_v4.75.2_linux.tar.gz
fd01105903052a38c1c0542dd0837fab64beb81e20640bcc14611e310fca9403  fleetctl_v4.75.2_linux_amd64.tar.gz
3745b6e6894424cdd4ced29d4445fea94acbfb7bf9f6d6d26bb9628ee59f8b1f  fleetctl_v4.75.2_linux_amd64.zip
5cf86eb721cf5cb12f8552845fcd2f097f4182c42efbb7834c3c5edc013d661a  fleetctl_v4.75.2_linux_arm64.tar.gz
8817c72f016704fac43146fd0f50290cbeabddd5c31ead9087fb153c067cc20f  fleetctl_v4.75.2_linux_arm64.zip
31a3f5f057f075e499ddc86c32769a9f26c47a6fe197b4ad1752b374fdb7aeda  fleetctl_v4.75.2_macos.tar.gz
2134bf29f762368a5e2a8ccb2d28014834a1a5ccd451bd99dcf5eebc184a426d  fleetctl_v4.75.2_macos.zip
c86bb2efe8113201ede7b2ec9e727d8589f41fb23d1ca88d5733cd0dc6fae68e  fleetctl_v4.75.2_windows_amd64.tar.gz
f9678a604d419266b35d43378c9bff6d0c7767e6acdc74ebabd7857aa45b5956  fleetctl_v4.75.2_windows_amd64.zip
16cb60a38bd66be3fab396528aaed991a2528a4609b6f25bc5d8a453aab0e51c  fleetctl_v4.75.2_windows_arm64.tar.gz
7bf75c69cba73124966b374531af774cba4801b22aaa3b8f7c4a12dae7d95e9c  fleetctl_v4.75.2_windows_arm64.zip

fleet-v4.78.2

Bug fixes

• Added additional validation to URL parameter for MS MDM auth endpoint

Upgrading

Please visit our update guide for upgrade instructions.

Documentation

Documentation for Fleet is available at fleetdm.com/docs.

Binary Checksum

SHA256

3c0fb6373c6a87c7a8916c4f98066ea6843b02ad2586db9333ae990f63c6ae9e  fleet_v4.78.2_linux.tar.gz
5302b78e17a512fd44add3c9ba9e58f79f52d2e9dc526a2759720a5252e6ee11  fleetctl_v4.78.2_linux_amd64.tar.gz
2fdf8bf785cfa4f354d78feb081e7c904568113913c3cfc8c72dcc4246aff568  fleetctl_v4.78.2_linux_amd64.zip
302814ea80c1684fc0f5d54340bdf37a33e72bae21ee5a8c65e0c4a660ad32f1  fleetctl_v4.78.2_linux_arm64.tar.gz
e4efd7f8f64f71cdc4f0cec00d9ae6e1a9fe7e4356b27307726f061386525690  fleetctl_v4.78.2_linux_arm64.zip
4658b0d3ba46f4b390ed2d2f700e35ae71a6b9aacb47e7ec6f3d62a6366445d4  fleetctl_v4.78.2_macos.tar.gz
e41d2a963f9e9e9aab5a1e2008660c4ccc91d814b8fd7b99b2fcc3f738b275d3  fleetctl_v4.78.2_macos.zip
b89a98d079e077838b9e396e82841da2b0f3e0a9dc46814bd55ce2a3c8e47773  fleetctl_v4.78.2_windows_amd64.tar.gz
3ffd1c548bcca390a10f586afbd48632a318dee790aa05c0b7ac8b4b78ee12a8  fleetctl_v4.78.2_windows_amd64.zip
030fd16627f907a379ea69c05be8612e2fbe99a65a1438cc43a8642284419a7b  fleetctl_v4.78.2_windows_arm64.tar.gz
bfd111fa990523196afeea3a009f56a682b1f5ed41cfc3c8201c0566cc13739f  fleetctl_v4.78.2_windows_arm64.zip

fleet-v4.78.1

Fleet 4.78.1 (Jan 6, 2026)

Bug fixes

• Fixed duplicate entry error when updating upgrade_code during software ingestion
• Fixed case sensitivity mismatches causing duplicate titles during software ingestion
• Added missing upgrade code persistence when adding Windows software to Fleet via GitOps
• Fixed a bug where iOS and iPadOS hosts enrolling via ABM MDM Migration would not have VPP apps installed

Upgrading

Please visit our update guide for upgrade instructions.

Documentation

Documentation for Fleet is available at fleetdm.com/docs.

Binary Checksum

SHA256

9f9f6423a4bccf267168b592f90ddd8d2819d3a13942975ed736174897b654dc  fleet_v4.78.1_linux.tar.gz
34cbe82900a2544b1500d8f3ffab6fe0d8aa1031a39afb97e5321841e1d3ac32  fleetctl_v4.78.1_linux_amd64.tar.gz
dd86cd7ab842df19374a061c25318a12c8ab578b49b7423e151c79d3ddcfc9d9  fleetctl_v4.78.1_linux_amd64.zip
23913c1d22c22aaf8a3c777a0a5eec94d4d58a45df9018d26fc63e445989d070  fleetctl_v4.78.1_linux_arm64.tar.gz
3f3a4a631a9b2ccdd4757e3658140c1b75bf02a06a7cef7847e9b139a282b795  fleetctl_v4.78.1_linux_arm64.zip
f63c6323ab579a2bba422f0922073da6eebe55f6fa21e23b0b34f970add44173  fleetctl_v4.78.1_macos.tar.gz
7f0acb9f330a94f830f7ddb8feda33e5d9f4105177db522c72be96881e92da50  fleetctl_v4.78.1_macos.zip
0cdf6372945a219b56c4854f11ba19b7526d06dd6a970e5ba593a2e8051c81ce  fleetctl_v4.78.1_windows_amd64.tar.gz
5f74bde28bc4c1891429cdc5e40a4b481c1a3f74dabb5591c49076abaf9088f9  fleetctl_v4.78.1_windows_amd64.zip
1e73c44d96d9856250215983957adf7275e820e7ae45d153b623f886b2d252b4  fleetctl_v4.78.1_windows_arm64.tar.gz
c758563ab07028deab7c00d9ff42b5220562bbbe1d0406f74478243a6bea867a  fleetctl_v4.78.1_windows_arm64.zip

fleet-v4.78.0

Fleet 4.78.0 (Dec 19, 2025)

IT Admins

• Added support for Android setup experience software installation.
• Added support for Android self-service apps to fleetctl gitops.
• Added support for Android systemUpdate profiles.
• Added ability to create/view/delete Google Play Store software for Android in UI.
• Added $FLEET_VAR_HOST_PLATFORM for Apple platforms (macos, ios, ipados).
• Added support for installation of setup-experience VPP apps on manually-enrolled iOS/iPadOS devices.
• Added ability to deploy user-scoped SCEP profiles for Windows hosts.
• Added a configuration option to require Windows users turn on MDM manually via work or school account, rather than have enrollment happen automatically.
• Added UI to allow Windows hosts to manually enroll into Fleet MDM.
• Added support for $FLEET_VAR_HOST_HARDWARE_SERIAL and $FLEET_VAR_HOST_PLATFORM in Windows profiles.

Security Engineers

• Added ability to filter the activites on the dashboard page.
• Updated to regenerate FileVault profile when Apple MDM is turned on if the device's team has disk encryption enabled.
• Added Okta conditional access configuration to the Fleet UI under Settings -> Integrations -> Conditional access.
• Added endpoint for hosts to update certificate status.
• Added detail column to host_certificate_template table and added certificate_templates property with GitOps support.
• Updated fleetd/certificates/<id> and fleetd/certificates/<id>/status to authenticate using the orbit_node_key provided in the Authentication header.
• Updated MDM-enrolled Android devices to receive certificate templates in managedConfigurations.

Other improvements and bug fixes

• Improved performance by making the host_count property optional in the GET /labels API endpoints.
• Improved performance by avoiding unneeded extra queries when fetching team information.
• Improved request validation by returning an informative error when trying to filter software_titles with platform without a team_id.
• Allowed users to save Fleet queries even if their SQL is deemed invalid by the Fleet UI.
• Added a new error UI for file uploaders, and applied it in the Okta Conditional Access modal.
• Returned pre-install query output in Install Details modal.
• Translated idp to mdm_idp_accounts on API responses.
• Updated last_restarted_at property for hosts to be more reliable.
• Added Mosyle to the list of well-known MDM platforms.
• Changed where mdm_enrolled activity is created so it occures after the inital Token Update command to allowa the webhook to fire after the host can recieve additonal commands from Fleet MDM.
• Improved MDM command result endpoint response for pending Windows commands.
• Switched configurations referencing Redis 5 to Redis 6. Fleet is no longer verified to work with Redis 5 or below.
• Redacted API tokens in fleetctl config set to prevent accidental logging.
• Updated error message when attempting to run software install script on host with scripts disabled to refer to --enable-scripts flag (instead of --scripts-enabled).
• Updated queries APIs that drive the OS Settings UI to include the status of host cert templates.
• Updated the layout and styling of file uploader buttons across the UI.
• Updated built-in SVG icons to avoid rendering issues when certain combinations of icons are on the same page.
• Added consistant spacing to UI elements on the MDM page.
• Updated Go to 1.25.5.
• Fixed an issue where using bitwise operators in a query incorrectly marked the query as invalid.
• Fixed issue where MDM profile retry limits were interfering with Smallstep SCEP proxy renewal attempts, particularly in cases of expired SCEP challenges.
• Fixed incorrect status code on failure to interpolate certificate template variables.
• Fixed Android configuration profiles downloading as unusable .xml files with content [object Object]. Android profiles now download correctly as .json files with properly formatted JSON content, matching what was originally uploaded.
• Fixed the tab order of elements in the login form.
• Fixed UI bug where the option to resend MDM profiles for macOS hosts was incorrectly presented to non-admin and non-maintainer users.
• Fixed an issue that prevented GitOps from saving multiple queries with the same label.
• Fixed an issue where "Exclude Any" label scoping did work properly for iOS, iPadOS and Android hosts.
• Fixed bug that prevented filtering by platform when listing hosts with failed profiles.
• Fixed software action buttons to disable immediately on click to prevent multiple clicks.
• Fixed an issue where newly-enrolled Windows or Linux hosts were not automatically linked with existing SCIM user account data.
• Fixed UI bug in OS settings modal that caused status tooltip to flicker when refetching host details.
• Fixed a race condition when resending Apple Profiles that would not truly resend the latest profile.
• Fixed a missing redirect to the Fleet website.
• Fixed the connect message on the controls end user auth page so that it is consistant with the other set up experience subsections.
• Fixed a bug where "installed" software sometimes showed up as "uninstalled" when certain other pieces of data were not also present.

Fleet-maintained app updates and vulnerability fixes are applied, whether or not you upgrade.

Fleet's agent

The following version of Fleet's agent (fleetd) support the latest changes to Fleet:

1. orbit-v1.50.2
2. fleet-desktop-v1.50.2 (included with Orbit)
3. osquery-5.21.0 (included with Orbit)
4. fleetd-chrome-v1.3.3

While newer versions of fleetd still function with older versions of Fleet, old versions of fleetd and osquery may not function with new versions of Fleet. We do not actively test these scenarios, and we recommend deploying a minimum of the agent versions above before upgrading to this version of Fleet.

Upgrading

Please visit our upgrade guide for upgrade instructions.

Documentation

Documentation for Fleet is available at fleetdm.com/docs.

Binary Checksum

SHA256

a75667c3362b5ffa11d1c95e2839aeb4fe74cd274994aee08148fd6179527c74  fleet_v4.78.0_linux.tar.gz
5753557878a06de58c7aabdc2d55f27792ccacaed43ff9cc41ed9ef9f52bd943  fleetctl_v4.78.0_linux_amd64.tar.gz
ed9bf44b737e2285066ccf0c0f0fa328b7d6ec0033edb119183e4ded5d20f2c2  fleetctl_v4.78.0_linux_amd64.zip
1ba0a5d96566efed20a1ce96d3303e42ff2a0b7b8d3527bb35066efdb23ca5a0  fleetctl_v4.78.0_linux_arm64.tar.gz
cfd528a01f463a6b5afcc696fbaffc896b4f4a4e8a8dde6034eff9fa1082f582  fleetctl_v4.78.0_linux_arm64.zip
c6b2ad11c958f38b53168ee9396f6bded3ed5f863c253ade07eaf00921672488  fleetctl_v4.78.0_macos.tar.gz
e721bd5cf7c2fc378dc968cb24d229590bfd376226d50387d2ad1db42c17cb50  fleetctl_v4.78.0_macos.zip
a188080d9c972dc883e1a268a4d040dadf7912901a7a91c25c9e4f640396054b  fleetctl_v4.78.0_windows_amd64.tar.gz
8c41eafab9cb38e4a97b464f86e926da12c7b0531f848a3c306dc04ecfd7960c  fleetctl_v4.78.0_windows_amd64.zip
87e80393f956b137571cf6bce870c3eb0256c155d0ea76cef69fba1d6b5ca49c  fleetctl_v4.78.0_windows_arm64.tar.gz
e3aeddceada71115e53d86f74b8300566660cb44e2229c4cbd4f97d96ee668e7  fleetctl_v4.78.0_windows_arm64.zip

fleet-v4.77.0

Fleet 4.77.0 (Dec 02, 2025)

Security Engineers

• Added activity log entries for: host deletion and expiration, updating or deleting host IdP mappings.
• Resolved multiple false positive vulnerability matches for the VSCode golang extension.
• Resolved false positive CVE matches for Logi Bolt.app.
• Detected vulnerabilities in JetBrains IDE plugins.

IT Admins

• Updated MDM enrollment flow for BYOD macOS hosts to enable end user authentication prior to downloading the MDM profile via the "My device" page.
• Added self-service install support for custom IPA apps on iOS and iPadOS.
• Added support for in-house (".ipa") apps to fleetctl gitops.
• Updated existing POST /setup_experience/script endpoint to allow updating the macOS setup experience script in-place, and modified GitOps to remove the DELETE call.
• Added support for Custom EST certificate authorities.
• Added ability to deploy certificates from Custom SCEP certificate authorities on Windows.
• Added status counts to batch script detail page tabs.
• Added InstallAnywhere as a self-extracting archive for PE metadata extraction.
• Added ingestion of upgrade_codes from Windows software, and provided to all relevant software endpoints.

Other improvements and bug fixes

• Improved performance of /api/latest/fleet/software/versions API endpoint.
• Updated host expiry logic to not delete macOS hosts that checkin via MDM protocol but not via fleetd.
• Optimized the cleanup Apple host profiles query to reduce probability of DB locking.
• Implemented UI logic to call existing manual update IdP API functionality.
• Implemented UI logic and new DELETE endpoint to manually remove host IdP mappings.
• Added experimental FLEET_MDM_ENABLE_CUSTOM_OS_UPDATES_AND_FILEVAULT configuration to allow deploying custom OS settings including Filevault payloads and macOS and Windows update settings.
• Added ability to change software display names in the UI.
• Fixed table styling for selecting table rows.
• Simplified setup experience configuration UI.
• Added better error messages when using build-in labels on GitOps and on the LabelSpecs endpoint.
• Hid software host count and version table when no hosts have the software installed.
• Adjusted UI section headers and layout of Settings > Integrations in Fleet Free.
• Added vulnerability seeding and performance testing tools.
• Moved end user authentication SSO settings under Integrations > SSO in global settings.
• Removed the premium check for host OS settings in host summary UI.
• Reduced Android device reconciler frequency to 1 hour.
• Reduced Android API usage by listing devices instead of getting and checking Android Enterprise disconnects hourly.
• Set the order of software installed during the setup experience to alphanumeric.
• Updated Go to 1.25.3.
• Fixed a layout issue on the script batch details page.
• Fixed installer for Cisco Secure Client not showing as installed in inventory/library due to using the wrong bundle identifier. This application should show up correctly now in the software inventory.
• Fixed errors when trying to run the apple_mdm_iphone_ipad_refetcher cron job.
• Fixed bug that prevented users from editing custom EST certificates URLs.
• Fixed incorrect UI placeholder element by replacing it with it's actual value.
• Fixed issue where vulnerabilities would occasionally show as missing.

Fleet-maintained app updates and vulnerability fixes are applied, whether or not you upgrade.

Fleet's agent

The following version of Fleet's agent (fleetd) support the latest changes to Fleet:

1. orbit-v1.50.1
2. fleet-desktop-v1.50.1 (included with Orbit)
3. osquery-5.20.0 (included with Orbit)
4. fleetd-chrome-v1.3.3

While newer versions of fleetd still function with older versions of Fleet, old versions of fleetd and osquery may not function with new versions of Fleet. We do not actively test these scenarios, and we recommend deploying a minimum of the agent versions above before upgrading to this version of Fleet.

Upgrading

Please visit our upgrade guide for upgrade instructions.

Documentation

Documentation for Fleet is available at fleetdm.com/docs.

Binary Checksum

SHA256

014f227e5e473510a215d64c7d589eca436a7ae8dd4418af30d50b2f36cbb4ff  fleet_v4.77.0_linux.tar.gz
694ba395c6274c36876a364a1c0c48cbcfa29e0fbe48cd5bdb4b249281657ba8  fleetctl_v4.77.0_linux_amd64.tar.gz
b9c7f4fab027228d1d9ee03d3d91e4f0d21ddcd2d66ca5260b237861285f50a1  fleetctl_v4.77.0_linux_amd64.zip
7f1abd61ec0e113c8f2c1344901a4fc93620da86bcef90b546f82498fe512758  fleetctl_v4.77.0_linux_arm64.tar.gz
8376763b99fa04f89fa4cfd4fdcafd1e3e0d50b7706f70ce12f0e8ef6886bfc8  fleetctl_v4.77.0_linux_arm64.zip
cac4ae3ccb3816d1ef8cd29b347d39126a3c33fc178393fac936ba3489fe4a06  fleetctl_v4.77.0_macos.tar.gz
b641a3e666150e4eeec6cca8e3e4bbf37a0c69605ad54cc0b997c47df684fb48  fleetctl_v4.77.0_macos.zip
e53f1d9ea91c31661bd6e5521911553beaf1af48163d6887f5075f82460a1ddb  fleetctl_v4.77.0_windows_amd64.tar.gz
6dcfca6971b22bd842e30e5f24051fe97f81432bc3d7be81c034fbb98e491004  fleetctl_v4.77.0_windows_amd64.zip
f9cf1cfcf510ca724c55778edad5dff585073aa94797c4fc9e9cc44693cda071  fleetctl_v4.77.0_windows_arm64.tar.gz
9b11e38a413c6f73cdfe680e024a0874e62c249fa2696129f3bb0dcd13e81efe  fleetctl_v4.77.0_windows_arm64.zip

fleet-v4.76.1

Bug fixes

• Updated existing /setup_experience/script POST endpoint to allow updating the macOS setup experience script in-place, and modified gitops to remove the DELETE call

Upgrading

Please visit our update guide for upgrade instructions.

Documentation

Documentation for Fleet is available at fleetdm.com/docs.

Binary Checksum

SHA256

39c17ecb56815ecef51cb91fae7228bf13b67a8be1e8cb101f863276ef263e82  fleet_v4.76.1_linux.tar.gz
af2b6a9813222a215b5756f7593fdcc666e5cda9212e16612b7583cb6bcd067d  fleetctl_v4.76.1_linux_amd64.tar.gz
48bb1af1b6256214400db94ea7c0263207b8a43a32aaa255ab4cd2a7b2662a4a  fleetctl_v4.76.1_linux_amd64.zip
4f2adb5fb1262cfce62f185fa0e9d0934730e46dd1a66fe73d7824b44c8fe86c  fleetctl_v4.76.1_linux_arm64.tar.gz
cc0f256a095064fd83ea244a676cecbadfd4572883802a347cf643d07cfb4ce0  fleetctl_v4.76.1_linux_arm64.zip
40226d6081351c2042e641471aa21064d368bff30a47ff11c2dbcef54b131d83  fleetctl_v4.76.1_macos.tar.gz
ae1eb85029e3ea9abea1cd3e4a8aa8c1680862b13cd9a03a4bb653747c219554  fleetctl_v4.76.1_macos.zip
bd39ce43c6d408e3448f21043f7b95f9618218ff4d7b0100be7143f8c1d9cd18  fleetctl_v4.76.1_windows_amd64.tar.gz
95a1781fd00fa9e4202c8c4bbc8ec9f6e74715b440c06159b407a8f8aaba52f4  fleetctl_v4.76.1_windows_amd64.zip
af958f7bad34d11ecc2be44b2d1860dc2b90c9d2743642609ae56ed46026e294  fleetctl_v4.76.1_windows_arm64.tar.gz
d4584c2524488468f45c14db870a1afa3d9ed2b8010b0d584b775338ad52d13e  fleetctl_v4.76.1_windows_arm64.zip

fleet-v4.76.0

Fleet 4.76.0 (Nov 7, 2025)

Security Engineers

• Added support for software inventory on Android hosts.
• Added support for npm packages in software inventory and vulnerability matching for macOS and Linux hosts.
• Added support for JetBrains inventory on hosts.
• Added vulnerbaility detection in JetBrains plugins.
• Added support for VSCode fork (Cursor, Windsurf, VSCodium, VSCodium Insiders, and Trae) extensions in software inventory.
• Added Santa tables to fleetd.

IT Admins

• Added ability to install software for iOS and iPadOS hosts during the setup experience.
• Added ability to specify VPP apps for automatic installation during ADE iOS and iPadOS host enrollment.
• Added the ability to lock iOS and iPadOS devices through lost mode.
• Added support for locking and unlocking iOS and iPadOS devices from the UI.
• Added configuration option to setup experience for macOS hosts to halt if any software install fails.
• Added gigs_all_disk_space vital collection, storage, service, and UI rendering for Linux hosts.
• Added new server config flag for specifying the cleanup age for completed distributed targets.

Other improvements and bug fixes

• Added link component shown in the host column to the host details page.
• Added flash warning when an unauthorized user tries to access teams settings.
• Added descriptive error in cases of manual macOS profile download failure.
• Updated the macOS setup experience to use the new web UI.
• Updated the UI for adding new scripts to the scripts library.
• Changed display logic for the organization logo component on the My Device page to prevent flickering.
• Improved performance of /api/latest/fleet/os_versions endpoint, especially for deployments with Linux hosts.
• Optimized MySQL queries on /api/latest/fleet/vulnerabilities and /api/latest/fleet/software/versions to improve performance for Fleet UI use cases.
• Optimized /config API endpoint to use the primary DB node for both persisting changes and fetching modified app config.
• Improved live query response times by adding a new server config flag for specifying the cleanup age for completed distributed targets.
• Improved query performance by using a lighter-weight query for checking if a team is enabled for conditional access.
• Changed license warning to only show one time during GitOps runs.
• Updated to allow setting an org support url to use the "file" protocol in the url.
• Changed the default name of Host Identity CA to 'Fleet Host Identity CA' to avoid conflict with Fleet's Apple MDM CA.
• Updated host details run script user flows to include a confirmation step.
• Applied singular word form to GitOps log messages when a single entity is referenced in the message.
• Updated the "Setting up your device" page to show status of setup script run.
• Deprecate browser in favor of extension_for in API responses and JSON/YAML outputs.
• Added migration to clear the platform field on all builtin labels.
• Added migration to relink missing SCIM user data to hosts.
• Updated host certificate renewal flow for NDES, Smallstep, custom scep proxy CAs to support $FLEET_VAR_SCEP_RENEWAL_ID in the OU field rather than CN.
• Updated device mapping API to allow an "idp" source to manually set IDP user mappings.
• Updated styling to be more consistent in edit policies view for FireFox.
• Replaced outdated Firefox icon with a new one that follows brand guidelines.
• Allowed testing a new or edited policy query via live query while in GitOps Mode.
• Fixed missing "failed" VPP app install activities when installation is canceled due to MDM being turned off for a host.
• Fixed bug where uploading a software installer failed because it was "not found in the datastore".
• Fixed missing aboslute timestamp tooltips on script creation date in script list, query modification date in query list.
• Fixed bug with the ChangeManagement component where the GitOps checkbox local UI state was being reset due to GET request after PATCH request.
• Fixed MySQL deadlocks when multiple hosts are updating their certificates in host vitals at the same time.
• Fixed an issue where longer variable names ($FLEET_VAR_HOST_END_USER_IDP_USERNAME_LOCAL_PART) with the same base ($FLEET_VAR_HOST_END_USER_IDP_USERNAME) was not processed in the right order.
• Fixed UI bug where "Show disk encryption key" option was incorrectly displayed for hosts enrolled with a third-party MDM solution.
• Fixed WhatsApp and VS Code icons not displaying correctly
• Fixed bad software ingestion debug message and added filter for invalid software with missing names.
• Fixed a bug where a software installer could be installed in the same team and same platform (macOS) where an App Store app already existed for the same software title, and vice-versa (App Store app added when a sofware package already existed, this one was only possible just via fleetctl gitops).
• Fixed listing hosts with populate_software not returning hash_sha256 for macos apps.
• Fixed bug where batch setting MDM profiles could cause a nil pointer dereference when processing an invalid profile (e.g., cannot parse mobileconfig because it is bad xml).
• Fixed bug hiding the UI elements post install script output in Software Install Details modal.
• Fixed software title host count mismatch that was caused by including software installers in the count.
• Fixed a scenario where a wiped Windows host re-enrolled as a distinct host row in Fleet and the previous host's page could not be loaded successfully.
• Fixed an issue where a host transfer on mdm_enrolled activity would be reversed by orbit enroll.
• Fixed a bug in live queries that caused livequery:{$CAMPAIGN_ID} Redis keys to not be cleaned up or expire.
• Fixed inconsistency in GitOps for App store apps if no VPP token was found, so that both dry run and actual run fails.
• Fixed the software title counts by status to be consistent with the status reported in the host's software list and filter by status.
• Fixed outdated tooltip on dark background logo URL field in Organization info settings.
• Fixed fleetctl generate-gitops when MDM is not turned on.

Fleet-maintained app updates and vulnerability fixes are applied, whether or not you upgrade.

Fleet's agent

The following version of Fleet's agent (fleetd) support the latest changes to Fleet:

1. orbit-v1.48.1
2. fleet-desktop-v1.49.1 (included with Orbit)
3. osquery-5.20.0 (included with Orbit)
4. fleetd-chrome-v1.3.3

While newer versions of fleetd still function with older versions of the Fleet server (and vice versa), Fleet does not actively test these scenarios and some newer features won't be available.

Upgrading

Please visit our upgrade guide for upgrade instructions.

Documentation

Documentation for Fleet is available at fleetdm.com/docs.

Binary Checksum

SHA256

0fbb04d29e075b25a80d1c5acfdf60e9bfb38289cdf123a8f72b78dfe3bd805f  fleet_v4.76.0_linux.tar.gz
9d3eadeae6d3f1a2fbe65032c2a667945040d8a5db17f664c7532f5109701dd0  fleetctl_v4.76.0_linux_amd64.tar.gz
fa78a4fdddef9bf9ebb7eaeba43b719c24dc1629a30e46feed57855a4ad9d3ab  fleetctl_v4.76.0_linux_amd64.zip
7f030c055185d50d47852f152f8ec8bfc86bf883435a4b4ca6317a50b7e849b6  fleetctl_v4.76.0_linux_arm64.tar.gz
3d59a661cf054db548f0aca6da4ab68fa8d94e11ae749fd0e8896a09dac8aec9  fleetctl_v4.76.0_linux_arm64.zip
2e3a52d862238877e190733e597eadb801f6ef63cf32c0247b2f3237ea2f9c11  fleetctl_v4.76.0_macos.tar.gz
5a8f36ed77cf1d80cce10cca2ac66c4cb04c1deb32d9364512de2cf1d3c7bd01  fleetctl_v4.76.0_macos.zip
849e04c80a830095739a84541525d7d79ff4e2485c98d7765f987f5fd12db546  fleetctl_v4.76.0_windows_amd64.tar.gz
584d9a2d476182d2307c275070257e80ab903d1eb51f329bfef88d0a647eaefc  fleetctl_v4.76.0_windows_amd64.zip
8aacc129b1483b044ea576e3efd3b9d418a7634edb16623349a784f7ff9c7582  fleetctl_v4.76.0_windows_arm64.tar.gz
1bf46c17000a3e83e2ae68b368d78b32e1ddf9dee9d9ed333534ef9eec818f0c  fleetctl_v4.76.0_windows_arm64.zip