CVE-2021-41805

CVE-2021-41805 Hashicorp Consul RCE via API HashiCorp Consul Enterprise before 1.8.17, 1.9.x before 1.9.11, and 1.10.x before 1.10.4 has Incorrect Access Control. An ACL token with the default operator:write permissions in one namespace can be used for unintended privilege escalation in a differe...

CVE-2021-41805

CVE-2021-41805 - HashiCorp Consul Enterprise RCE !WARNING LEGAL DISCLAIMER: This tool is STRICTLY for EDUCATIONAL PURPOSES ONLY! Usage of this tool for attacking targets without prior mutual consent is ILLEGAL. It is the user's responsibility to obey all laws that apply whilst using this tool. Th...

HashiCorp Consul/Consul Enterprise - Server-Side Request Forgery

HashiCorp Consul and Consul Enterprise up to 1.9.16, 1.10.9, and 1.11 are susceptible to server-side request forgery. When redirects are returned by HTTP health check endpoints, Consul follows these HTTP redirects by default. An attacker can possibly obtain sensitive information, modify data,...

HashiCorp Consul/Consul Enterprise <=1.9.4 - Cross-Site Scripting

HashiCorp Consul and Consul Enterprise up to version 1.9.4 are vulnerable to cross-site scripting via the key-value KV raw mode. id: CVE-2020-25864 info: name: HashiCorp Consul/Consul Enterprise =1.9.4 - Cross-Site Scripting author: c-sh0 severity: medium description: | HashiCorp Consul and Consu...

CVE-2026-5061

CVE-2026-5061 Consul Template validated where a symlink pointed during template evaluation, but its later dependency fetch read the original path. Retargeting the link between those operations turned an in-sandbox file reference into an out-of-sandbox file disclosure. Intro I found this issue whi...

CVE-2026-27172

camel-consul ConsulRegistry Deserialization Vulnerability Reproducer CVE-2026-27172 This project demonstrates a Java deserialization vulnerability in Apache Camel's camel-consul component ConsulRegistry, tracked as CVE-2026-27172. It is the same class of issue as CVE-2024-22369 , CVE-2024-23114 a...

CVE-2026-14361

CVE-2026-14361 Consul Template's writeToFile helper opened an operator-supplied destination directly and followed linked path components, allowing rendered output to escape the intended directory and overwrite a preexisting file. Intro I found this issue while reviewing HashiCorp Consul Template ...

reproxy

Reproxy es un servidor/proxy inverso simple de borde HTTPs que admite varios proveedores docker, estático, archivo, catálogo consul. Uno o más proveedores suministran información sobre el servidor solicitado, la URL solicitada, la URL de destino y la URL de verificación de salud. Se distribuye co...

GO-2026-6604 vulnerabilities

Vulnerabilities for packages: qemu-guesthelper, commercial-gitlab-rails-ee-fips, commercial-grafana, commercial-chainloop-cli, commercial-nginx-ingress, commercial-spilo-fips, loki, k8s-device-plugin, commercial-gitlab-workhorse-ee-fips, external-dns, opentelemetry-collector-k8s, flux, tempo-fips...

GHSA-C3Q7-M35P-9QQ7 vulnerabilities

Vulnerabilities for packages: qemu-guesthelper, commercial-gitlab-rails-ee-fips, commercial-grafana, commercial-chainloop-cli, commercial-nginx-ingress, commercial-spilo-fips, loki, k8s-device-plugin, commercial-gitlab-workhorse-ee-fips, external-dns, opentelemetry-collector-k8s, flux, tempo-fips...

CVE-2026-56857 vulnerabilities

Vulnerabilities for packages: qemu-guesthelper, commercial-gitlab-rails-ee-fips, commercial-grafana, commercial-chainloop-cli, commercial-nginx-ingress, commercial-spilo-fips, loki, k8s-device-plugin, commercial-gitlab-workhorse-ee-fips, external-dns, opentelemetry-collector-k8s, flux, tempo-fips...

Astra Linux – Vulnerability in Consul

The HashiCorp Consul and Consul Enterprise versions up to 1.9.4 had a key-value KV raw mode that was vulnerable to cross-site scripting attacks. This issue was fixed in versions 1.9.5, 1.8.10, and 1.7.14...

CLEANSTART-2026-AG71066 SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read

Security vulnerability affects the consul package. SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read...

CLEANSTART-2026-NN31666 OpenTelemetry-Go is the Go implementation of OpenTelemetry

Security vulnerability affects the consul package. OpenTelemetry-Go is the Go implementation of OpenTelemetry...

CLEANSTART-2026-ED72933 html

Security vulnerability affects the consul package. The html...

CLEANSTART-2026-TG08354 html

Security vulnerability affects the consul package. The html...

CLEANSTART-2026-OZ83684 SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption

Security vulnerability affects the consul package. SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption...

CLEANSTART-2026-ZV78301 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process

Security vulnerability affects the consul package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process...

CLEANSTART-2026-MP17411 Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation wou...

Security vulnerability affects the consul package. Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation would be skipped...

CLEANSTART-2026-IT57555 Security fix for GHSA-p77j-4mvh-x3m3 applied in: consul 1.21.5-r0

Security vulnerability affects the consul package. This issue is resolved in later releases. See references for vulnerability details...