CVE-2026-115362

The OpenBao software (versions before 2.6.4 and 2.7.x before 2.7.1 ) contains a vulnerability where the AppRole authentication method fails to verify the expiration of Secret IDs during use. This flaw allows an attacker possessing an expired, untidied Secret ID to bypass the intended Time-To-Live...