CVE-2026-115356

A flaw was found in OpenBao. When renewing an access token issued through the Kubernetes authentication method, OpenBao fails to verify whether the underlying Kubernetes service account remains valid. An authenticated attacker can exploit this issue by repeatedly renewing their token to maintain...