CVE-2026-89322

Vault and Vault Enterprise are vulnerable to a flaw where ACL policies are not consistently evaluated against the canonical form of resource and policy names. This CWE-178 (Improper Handling of Case Sensitivity) issue allows an authenticated user with delegated permissions to bypass explicit deny...