CVE-2026-46358

OpenBao CVE-2026-46358 affects the OpenBao identity-based secrets management system. Before v2.5.4, its inline auth feature redacted audit-log entries incorrectly, leaving non-auth headers removed while auth-related headers remained in cleartext. This requires local access to the audit device to ...