CVE-2026-105765

A flaw was found in HashiCorp Consul. An authorization bypass vulnerability in the agent's service mesh leaf certificate API allows an attacker without a valid Access Control List ACL token to retrieve cached service leaf certificates along with their private keys. This could enable an unauthoriz...