CVE-2026-19017

Consul vulnerable: Community Edition and Enterprise versions 1.18.21–2.0.2 are affected by a partial arbitrary file read when configured with Vault Connect CA provider using JWT or AppRole authentication. A user with operator:write can instruct Consul to read and forward credential files outside ...

EUVD-2026-54610

Consul Community Edition and Consul Enterprise 1.18.21 through 2.0.2 are vulnerable to a partial arbitrary file read when configured to use the Vault Connect CA provider with JWT or AppRole authentication. A privileged attacker with operator:write permission may direct Consul to read and forward...