CVE-2021-41805

CVE-2021-41805 - HashiCorp Consul Enterprise RCE !WARNING 法律免责声明： 此工具严格仅用于教育目的！ 在未事先获得双方同意的情况下使用此工具攻击目标是非法的。 使用此工具时，用户有责任遵守所有适用法律。 此工具的开发者不承担任何责任，也不对因使用本程序而导致的任何滥用或损害负责。 关于该 CVE 一个 ACL 令牌 （具有默认的 operator:write 权限）在一个命名空间中可用于在另一个命名空间中进行意外的权限提升。此漏洞可被滥用以获得提升权限的远程代码执行（RCE） 。 受影响版本 运行脚本： python3...

CVE-2021-41805

CVE-2021-41805 HashiCorp Consul 通过 API 远程代码执行 HashiCorp Consul Enterprise 在 1.8.17 之前、1.9.x 在 1.9.11 之前以及 1.10.x 在 1.10.4 之前存在不正确的访问控制。一个命名空间中的 ACL 令牌（具有默认 operator:write 权限）可用于在另一个不同的命名空间中实现意外的权限提升。 摘要 CVEID : CVE-2021-41805 Base Score : 8.8 Severity : 高 Issued on : 2021-12-12 Affected Versions ...

BIT-CONSUL-2026-19014 Uncontrolled resource consumption in the Consul Connect authorization endpoint

Consul Community Edition and Consul Enterprise 1.17.0 through 2.0.2 are vulnerable to an uncontrolled resource consumption issue in the Connect authorization endpoint that may allow a caller to grow the agent's intention-match cache without bound, defeating the operator's cache-disable...

GO-2025-4082 vulnerabilities

Vulnerabilities for packages: consul, consul-fips...

GO-2024-3243 vulnerabilities

Vulnerabilities for packages: consul, consul-fips...

CVE-2026-19015

A flaw was found in Consul. A remote attacker can exploit an uncontrolled resource consumption vulnerability in the Connect CA roots endpoint. This allows the attacker to continuously grow the agent's Connect CA roots cache, bypassing configured cache limits. The consequence is a denial of servic...

Linux Distros Unpatched Vulnerability : CVE-2026-19014

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Consul Community Edition and Consul Enterprise 1.17.0 through 2.0.2 are vulnerable to an uncontrolled resource consumption issue in the Connect authorization...

UBUNTU-CVE-2026-19113

Consul Community Edition and Consul Enterprise 1.3.0 through 2.0.2 are vulnerable to an unauthenticated denial of service in several agent HTTP API endpoints. A remote caller could cause the agent to consume substantial memory before the request was rejected. This vulnerability, CVE-2026-19113, i...

CVE-2026-19014

Consul Community Edition and Consul Enterprise 1.17.0 through 2.0.2 are vulnerable to an uncontrolled resource consumption issue in the Connect authorization endpoint that may allow a caller to grow the agent's intention-match cache without bound, defeating the operator's cache-disable...

UBUNTU-CVE-2026-19014

Consul Community Edition and Consul Enterprise 1.17.0 through 2.0.2 are vulnerable to an uncontrolled resource consumption issue in the Connect authorization endpoint that may allow a caller to grow the agent's intention-match cache without bound, defeating the operator's cache-disable...

SUSE SLES15 Security Update : zypper-docker (SUSE-SU-2026:1951-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1951-1 advisory. This update for zypper-docker fixes the following issues - CVE-2026-2808: github.com/hashicorp/consul: unvalidated user-supplied fi...

GO-2026-4690 Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul

Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul...

CVE-2026-2808

A flaw was found in HashiCorp Consul. When configured with Kubernetes authentication, a highly privileged attacker can exploit this vulnerability to perform arbitrary file reads. This could lead to the disclosure of sensitive information from the system...

DEBIAN-CVE-2026-2808

HashiCorp Consul and Consul Enterprise 1.18.20 up to 1.21.10 and 1.22.4 are vulnerable to arbitrary file read when configured with Kubernetes authentication. This vulnerability, CVE-2026-2808, is fixed in Consul 1.18.21, 1.21.11 and 1.22.5...

UBUNTU-CVE-2026-2808

HashiCorp Consul and Consul Enterprise 1.18.20 up to 1.21.10 and 1.22.4 are vulnerable to arbitrary file read when configured with Kubernetes authentication. This vulnerability, CVE-2026-2808, is fixed in Consul 1.18.21, 1.21.11 and 1.22.5...

CVE-2026-2808

HashiCorp Consul and Consul Enterprise 1.18.20 up to 1.21.10 and 1.22.4 are vulnerable to arbitrary file read when configured with Kubernetes authentication. This vulnerability, CVE-2026-2808, is fixed in Consul 1.18.21, 1.21.11 and 1.22.5...

CVE-2026-2808

HashiCorp Consul and Consul Enterprise 1.18.20 up to 1.21.10 and 1.22.4 are vulnerable to arbitrary file read when configured with Kubernetes authentication. This vulnerability, CVE-2026-2808, is fixed in Consul 1.18.21, 1.21.11 and 1.22.5...

HashiCorp Consul和HashiCorp Consul Enterprise 安全漏洞

HashiCorp Consul and HashiCorp Consul Enterprise are both products of the American company HashiCorp. HashiCorp Consul is a distributed, highly available data center awareness solution. It is used for connecting and configuring applications across dynamic distributed infrastructures. HashiCorp...

GO-2025-4082 Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul

Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul...

HashiCorp Consul和HashiCorp Consul Enterprise 安全漏洞

HashiCorp Consul and HashiCorp Consul Enterprise are both products of HashiCorp, Inc. of the U.S. HashiCorp Consul is a suite of distributed, highly available data center-aware solutions. The product is used to connect and provision applications across dynamically distributed...