Lucene search
+L

2 matches found

OSV
OSV
added 2026/06/25 6:43 p.m.28 views

GO-2026-5267 OpenBao: Transit secrets engine crashes on key creation with `derived: true` for asymmetric key types in github.com/openbao/openbao

OpenBao: Transit secrets engine crashes on key creation with derived: true for asymmetric key types in github.com/openbao/openbao...

5.8AI score
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2026/06/19 9:42 p.m.23 views

OpenBao: Transit secrets engine crashes on key creation with `derived: true` for asymmetric key types

On OpenBao 2.5.4 and 2.5.2and likely earlier versions also, an authenticated caller with write access to transit/keys/ can crash the OpenBao server by issuing a single key-creation request that combines an asymmetric type rsa-, ecdsa-, ed25519 with derived: true. The server returns no HTTP respon...

6AI score
SaveExploits0References5Affected Software1
Rows per page
Query Builder