542 matches found
CVE-2026-55776
A flaw was found in OpenBao. An authenticated user with write access to the transit secrets engine could trigger a server crash by creating a key with specific asymmetric key types and a 'derived' parameter set to true. This vulnerability, caused by a double-unlock of a mutex, leads to a denial o...
CVE-2026-55775
OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, OpenBao users granted capabilities on /sys/namespaces/root within a non-root namespace could exploit special handling of the literal root path in namespace canonicalization. The /sys/namespaces/ endpoint family ca...
CVE-2026-55776
OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, an authenticated OpenBao caller with write access to transit/keys/ could terminate the server process by setting derived to true while the type parameter selected rsa-, ecdsa-, or ed25519. The Transit policy...
CVE-2026-55770
OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, OpenBao used EscapeLDAPValue, an RFC 4514 distinguished-name escaping function, where RFC 4515 LDAP search-filter escaping was required in sdk/helper/ldaputil/client.go GetUserDN. With the LDAP authentication...
CVE-2026-55774
OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, an OpenBao user with access to sys/leases/revoke/:leaseid in one namespace could revoke a lease in another namespace when the foreign leaseid was known, bypassing namespace ACL isolation. The affected lease lookup...
CVE-2026-55770
OpenBao , an open source identity-based secrets management system, contains an LDAP injection flaw in sdk/helper/ldaputil/client.go (GetUserDN). Prior to 2.5.5 , the function used EscapeLDAPValue (an RFC 4514 distinguished-name escaper) where RFC 4515 LDAP search-filter escaping (ldap.EscapeFilte...
CVE-2026-55770 OpenBao: LDAPi ldaputil (wrong escape func)
OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, OpenBao used EscapeLDAPValue, an RFC 4514 distinguished-name escaping function, where RFC 4515 LDAP search-filter escaping was required in sdk/helper/ldaputil/client.go GetUserDN. With the LDAP authentication...
CVE-2026-55770 OpenBao: LDAPi ldaputil (wrong escape func)
OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, OpenBao used EscapeLDAPValue, an RFC 4514 distinguished-name escaping function, where RFC 4515 LDAP search-filter escaping was required in sdk/helper/ldaputil/client.go GetUserDN. With the LDAP authentication...
CVE-2026-55776
OpenBao prior to 2.5.5 is vulnerable to denial of service in its Transit secrets engine. An authenticated caller with write access to transit/keys/* could terminate the server process by setting derived to true while selecting an asymmetric key type (rsa, ecdsa, or ed25519). The root cause is a d...
CVE-2026-55776 OpenBao: Transit secrets engine crashes on key creation with `derived: true` for asymmetric key types
OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, an authenticated OpenBao caller with write access to transit/keys/ could terminate the server process by setting derived to true while the type parameter selected rsa-, ecdsa-, or ed25519. The Transit policy...
CVE-2026-55774 OpenBao: Cross-namespace lease revocation/renewal via canonical sys/leases/{revoke,renew} — incomplete fix of CVE-2026-45808
OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, an OpenBao user with access to sys/leases/revoke/:leaseid in one namespace could revoke a lease in another namespace when the foreign leaseid was known, bypassing namespace ACL isolation. The affected lease lookup...
CVE-2026-55774
OpenBao is an open-source identity-based secrets management system. Prior to 2.5.5 , the lease lookup routing in vault/expiration.go allowed FetchLeaseInfo and loadEntry to resolve cached or stored lease data outside the requesting namespace. This meant an authenticated user with access to sys/le...
CVE-2026-55775
OpenBao is an open-source identity-based secrets management system. Prior to 2.5.5 , users granted capabilities on /sys/namespaces/root within a non-root namespace could exploit a flaw in namespace path canonicalization . Because ACL checks occurred before the literal root path was canonicalized ...
CVE-2026-55775 OpenBao's System Backend allows Unauthorized Management of the containing Namespace
OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, OpenBao users granted capabilities on /sys/namespaces/root within a non-root namespace could exploit special handling of the literal root path in namespace canonicalization. The /sys/namespaces/ endpoint family ca...
EUVD-2026-78680
OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, OpenBao users granted capabilities on /sys/namespaces/root within a non-root namespace could exploit special handling of the literal root path in namespace canonicalization. The /sys/namespaces/ endpoint family ca...
ROS-20260902-73-0004
The vulnerability in openbao is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260902-73-0003
The vulnerability in openbao is related to the use of a name with an incorrect reference. Exploiting this vulnerability can allow a perpetrator to cause a service failure...
ROS-20260902-73-0005
The vulnerability in openbao is related to the use of a name with an incorrect reference. Exploiting this vulnerability can allow a perpetrator to cause a service failure...