CVE-2026-109408

The io.github.jopenlibs:vault-java-driver (versions 5.2.0 through 6.2.3) is vulnerable to a flaw where it silently disables TLS certificate and hostname verification. The root cause occurs in three specific scenarios: when an SslConfig is passed to VaultConfig without calling build(), when an Ssl...