Openbao vulnerabilities

Products

• Openbao 48

Newest

• openbao OpenBao 2.5.0 before 2.6.2 PKI allowed_ip_sans_cidr Bypass via CSR IP SANs CVE-2026-115369 Fix available 2.1 LowOctober 22, 2026
• openbao OpenBao 2.3.0 before 2.6.3 Missing Root Namespace Enforcement in Plugin Catalog APIs CVE-2026-115366 Fix available 2.0 LowOctober 22, 2026
• openbao OpenBao 2.3.0 before 2.6.3 Incorrect Authorization via Policy Cache Namespace Traversal CVE-2026-115365 Fix available 7.5 HighOctober 22, 2026
• openbao OpenBao before 2.6.3 Missing Header Check on Agent/Proxy Quit Endpoints CVE-2026-115364 Fix available 2.1 LowOctober 22, 2026
• openbao OpenBao 2.2.0 before 2.6.4 and 2.7.0 before 2.7.1 ACME EAB MAC Key Disclosure via Sanitized Configuration CVE-2026-115363 Fix available 2.1 LowOctober 22, 2026
• openbao OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Expired AppRole SecretID Authentication Bypass CVE-2026-115362 Fix available 2.1 LowOctober 22, 2026
• openbao OpenBao before 2.6.3 ACL Bypass via Dropped Templated Policy Denial CVE-2026-115361 Fix available 2.1 LowOctober 22, 2026
• openbao OpenBao before 2.6.3 Open Redirect via OIDC Identity Provider UI CVE-2026-115360 Fix available 5.3 MediumOctober 22, 2026
• openbao OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Role-Based Rate Limit Quota Bypass via Request Parsing CVE-2026-115359 Fix available 6.3 MediumOctober 22, 2026
• openbao OpenBao before 2.6.3 Sensitive Data Leak in Audit Log via Malformed Parameters CVE-2026-115358 Fix available 2.0 LowOctober 22, 2026
• openbao OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Improper Audit Logging of Root Generation and Rekey Responses CVE-2026-115357 Fix available 2.1 LowOctober 22, 2026
• openbao OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Kubernetes Auth Method Token Renewal After Revocation CVE-2026-115356 Fix available 5.3 MediumOctober 22, 2026
• openbao OpenBao LIST ACL bypass: a trailing-slash LIST request skips a more-specific deny rule (unported Vault v2.0.3 fix) CVE-2026-63131 Fix available 6.0 MediumSeptember 22, 2026
• openbao OpenBao's Recovery Mode Vulnerable To Token Leakage via Timing Attack CVE-2026-63132 Fix available 9.2 CriticalSeptember 22, 2026
• openbao OpenBao Agent Writes Secrets to Stdout CVE-2026-77285 Fix available 2.4 LowSeptember 22, 2026
• openbao OpenBao's Templated Policies Allow Privilege Escalation via Wildcard Characters CVE-2026-71543 Fix available 7.5 HighSeptember 21, 2026
• openbao OpenBao: Transit secrets engine crashes on key creation with `derived: true` for asymmetric key types CVE-2026-55776 Fix available 6.5 MediumJune 19, 2026
• openbao OpenBao's System Backend allows Unauthorized Management of the containing Namespace CVE-2026-55775 Fix available 2.3 LowJune 19, 2026
• openbao OpenBao: Cross-namespace lease revocation/renewal via canonical sys/leases/{revoke,renew} — incomplete fix of CVE-2026-45808 CVE-2026-55774 Fix available 2.1 LowJune 19, 2026
• openbao OpenBao: LDAPi ldaputil (wrong escape func) CVE-2026-55770 Fix available 6.8 MediumJune 19, 2026
• openbao OpenBao's Kerberos Auth Method Accumulates Unaccessible Tokens CVE-2026-46405 Fix available 5.3 MediumMay 21, 2026
• openbao OpenBao's Inline Auth Incorrectly Redacted Headers CVE-2026-46358 Fix available 5.4 MediumMay 21, 2026
• openbao OpenBao's cross-namespace lease revocation via legacy sys/revoke path bypasses ACL CVE-2026-45808 Fix available 7.1 HighMay 21, 2026
• openbao OpenBao's Namespace Deletion May Not Delete Data Properly CVE-2026-42186 Fix available 2.3 LowMay 5, 2026
• openbao OpenBao's Token Store Allows Cross-Namespace Renewal, Revocation CVE-2026-40264 Fix available 2.0 LowApril 21, 2026
• openbao OpenBao allows SQL Injection in PostgreSQL database secrets engine CVE-2026-39946 Fix available 4.6 MediumApril 21, 2026
• openbao OpenBao has Decompression Bomb via Unbounded Copy in OCI Plugin Extraction (DoS) CVE-2026-39396 Fix available 3.1 LowApril 21, 2026
• openbao OpenBao's Certificate Authentication Allows Token Renewal With Different Certificate CVE-2026-39388 Fix available 2.0 LowApril 21, 2026
• openbao, red hat cryostat 4 +1 more OpenBao has Reflected XSS in its OIDC authentication error message CVE-2026-33758 Fix available 9.4 CriticalMarch 26, 2026
• openbao, red hat cryostat 4 +1 more OpenBao lacks user confirmation for OIDC direct callback mode CVE-2026-33757 Fix available 9.6 CriticalMarch 26, 2026
• openbao OpenBao Privileged Operator Identity Group Root Escalation CVE-2025-64761 Fix available 7.5 HighNovember 24, 2025
• openbao aws plugin, openbao-plugins +1 more OpenBao AWS Plugin Vulnerable to Cross-Account IAM Role Impersonation in AWS Auth Method CVE-2025-59048 Fix available 8.1 HighOctober 23, 2025
• openbao OpenBao and Vault Leak []byte Fields in Audit Logs CVE-2025-62705 Fix available 5.7 MediumOctober 22, 2025
• openbao OpenBao leaks HTTPRawBody in Audit Logs CVE-2025-62513 Fix available 5.7 MediumOctober 22, 2025
• openbao OpenBao vulnerable to denial of service via malicious JSON request processing CVE-2025-59043 Fix available 7.5 HighOctober 17, 2025
• openbao OpenBao LDAP MFA Enforcement Bypass When Using Username As Alias CVE-2025-55001 Fix available 6.5 MediumAugust 8, 2025
• openbao OpenBao Login MFA Bypasses Rate Limiting and TOTP Token Reuse CVE-2025-55003 Fix available 5.7 MediumAugust 8, 2025
• openbao OpenBao TOTP Secrets Engine Enables Code Reuse CVE-2025-55000 Fix available 6.5 MediumAugust 8, 2025
• openbao OpenBao: Timing Side-Channel in Userpass Auth Method CVE-2025-54999 Fix available 3.7 LowAugust 8, 2025
• openbao OpenBao Userpass and LDAP User Lockout Bypass CVE-2025-54998 Fix available 5.3 MediumAugust 8, 2025
• openbao OpenBao: Privileged Operator May Execute Code on the Underlying Host CVE-2025-54997 Fix available 9.1 CriticalAugust 8, 2025
• openbao OpenBao Root Namespace Operator May Elevate Token Privileges CVE-2025-54996 Fix available 7.2 HighAugust 8, 2025
• openbao OpenBao Vulnerable to Unauthenticated Rekey Operation Cancellation CVE-2025-52894 Fix available 6.9 MediumJune 25, 2025
• openbao OpenBao May Leak Sensitive Information in Logs When Processing Malformed Data CVE-2025-52893 Fix available 4.5 MediumJune 25, 2025
• hashicorp vault, vault enterprise, openbao +2 more Vault May Include Sensitive Data in Error Logs When Using the KV v2 Plugin CVE-2025-4166 Fix available 4.5 MediumMay 2, 2025
• hashicorp vault, vault enterprise, openbao +2 more Vault Vulnerable to Denial of Service When Processing Raft Join Requests CVE-2024-8185 Fix available 7.5 HighOctober 31, 2024
• hashicorp vault, vault enterprise, openbao +2 more Vault Operators in Root Namespace May Elevate Their Privileges CVE-2024-9180 Fix available 7.2 HighOctober 10, 2024
• hashicorp vault, vault enterprise, vault community edition +1 more +3 more Vault SSH Secrets Engine Configuration Did Not Restrict Valid Principals By Default CVE-2024-7594 Fix available 7.5 HighSeptember 26, 2024
• hashicorp vault, vault enterprise, openbao +2 more Vault Cert Auth Method Did Not Correctly Validate Non-CA Certificates CVE-2024-2048 Fix available 8.1 HighMarch 4, 2024