Every CVE Search/ Get API key

CVE-2021-37219

HashiCorp Consul Privilege Escalation Vulnerability

8.8 HighFix available

HashiCorp Consul and Consul Enterprise 1.10.1 Raft RPC layer allows non-server agents with a valid certificate signed by the same CA to access server-only functionality, enabling privilege escalation. Fixed in 1.8.15, 1.9.9 and 1.10.2.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

1.15%Up 0.5 points since Sep 8, 2021
90%50%10%1%

What each source reports

NVD Score used 8.8

HashiCorp Consul and Consul Enterprise 1.10.1 Raft RPC layer allows non-server agents with a valid certificate signed by the same CA to access server-only functionality, enabling privilege escalation. Fixed in 1.8.15, 1.9.9 and 1.10.2.

Record
CVE-2021-37219
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
6.5 MediumAV:N/AC:L/Au:S/C:P/I:P/A:P
Weakness
CWE-295
Updated
2026-11-02
CVE List No score

HashiCorp Consul and Consul Enterprise 1.10.1 Raft RPC layer allows non-server agents with a valid certificate signed by the same CA to access server-only functionality, enabling privilege escalation. Fixed in 1.8.15, 1.9.9 and 1.10.2.

Record
CVE-2021-37219
Updated
2026-11-02
EUVDEUVD-2021-2037 No score

HashiCorp Consul and Consul Enterprise 1.10.1 Raft RPC layer allows non-server agents with a valid certificate signed by the same CA to access server-only functionality, enabling privilege escalation. Fixed in 1.8.15, 1.9.9 and 1.10.2.

Record
EUVD-2021-2037
Updated
2026-11-03
GitHub AdvisoriesGHSA-ccw8-7688-vqx4 8.8

HashiCorp Consul Privilege Escalation Vulnerability

HashiCorp Consul and Consul Enterprise 1.10.1 Raft RPC layer allows non-server agents with a valid certificate signed by the same CA to access server-only functionality, enabling privilege escalation. Fixed in 1.8.15, 1.9.9 and 1.10.2.

Record
GHSA-ccw8-7688-vqx4
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-295
Updated
2026-11-02
OSV 8.8

HashiCorp Consul and Consul Enterprise 1.10.1 Raft RPC layer allows non-server agents with a valid certificate signed by the same CA to access server-only functionality, enabling privilege escalation. Fixed in 1.8.15, 1.9.9 and 1.10.2.

Record
CVE-2021-37219
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2021-37219 8.8

HashiCorp Consul and Consul Enterprise 1.10.1 Raft RPC layer allows non-server agents with a valid certificate signed by the same CA to access server-only functionality, enabling privilege escalation. Fixed in 1.8.15, 1.9.9 and 1.10.2.

Record
DEBIAN-CVE-2021-37219
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 4 moreShow less
OSVGHSA-ccw8-7688-vqx4 8.8

HashiCorp Consul Privilege Escalation Vulnerability

HashiCorp Consul and Consul Enterprise 1.10.1 Raft RPC layer allows non-server agents with a valid certificate signed by the same CA to access server-only functionality, enabling privilege escalation. Fixed in 1.8.15, 1.9.9 and 1.10.2.

Record
GHSA-ccw8-7688-vqx4
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-295
Updated
2026-11-02
OSVUBUNTU-CVE-2021-37219 8.8

HashiCorp Consul and Consul Enterprise 1.10.1 Raft RPC layer allows non-server agents with a valid certificate signed by the same CA to access server-only functionality, enabling privilege escalation. Fixed in 1.8.15, 1.9.9 and 1.10.2.

Record
UBUNTU-CVE-2021-37219
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVBIT-consul-2021-37219 No score

HashiCorp Consul and Consul Enterprise 1.10.1 Raft RPC layer allows non-server agents with a valid certificate signed by the same CA to access server-only functionality, enabling privilege escalation. Fixed in 1.8.15, 1.9.9 and 1.10.2.

Record
BIT-consul-2021-37219
Updated
2026-11-02
OSVGO-2022-0593 No score

HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

Record
GO-2022-0593
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
github.com/hashicorp/consul
Go
 1.10.1 to 1.10.1
1.10.2
github.com/hashicorp/consul
Go
 1.9.0 up to 1.9.9
1.9.9
github.com/hashicorp/consul
Go
 before 1.8.15
1.8.15
consul
Bitnami
 before 1.8.15, 1.9.0 up to 1.9.9, 1.10.0 up to 1.10.2
1.8.151.9.91.10.2
consul
Debian:11
 All versions, plus listed versions
1.10.12+dfsg1-11.8.7+dfsg1-21.8.7+dfsg1-31.8.7+dfsg1-41.8.7+dfsg1-51.8.7+dfsg1-61.9.17+dfsg2-1
 None known
github.com/hashicorp/consul
Go
 1.10.1 up to 1.10.2
1.10.2
github.com/hashicorp/consul
Go
 before 1.8.15, 1.9.0 up to 1.9.9, 1.10.1 up to 1.10.2
1.8.151.9.91.10.2
consul
Ubuntu:18.04:LTS
 All versions, plus listed versions
0.6.4~dfsg-3
 None known
consul
Ubuntu:20.04:LTS
 All versions, plus listed versions
1.0.7~dfsg1-5ubuntu11.4.4~dfsg1-2ubuntu21.5.2+dfsg1-61.5.2+dfsg1-101.5.2+dfsg1-121.5.2+dfsg2-14
 None known
consul
Ubuntu:22.04:LTS
 All versions, plus listed versions
1.7.4+dfsg1-11.8.7+dfsg1-3
 None known

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-37219 is a high vulnerability (CVSS 8.8) in Hashicorp Consul, published September 7, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.15%, the 67th percentile. Fixed in github.com/hashicorp/consul 1.10.2.

References

Show 7 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open