CVE-2026-115369

The OpenBao software (versions 2.5.0 before 2.6.2) contains a vulnerability where it fails to enforce the allowed_ip_sans_cidr restriction on IP SANs. When use_csr_sans is enabled, authenticated callers with sign permission can submit a Certificate Signing Request (CSR) containing an out-of-range...