CVE-2026-115369

A flaw was found in OpenBao. When processing a Certificate Signing Request CSR in the Public Key Infrastructure PKI engine, the service fails to enforce configured IP address restrictions against requested Subject Alternative Names SAN. An authenticated remote user with certificate signing...

CVE-2026-115360

A flaw was found in OpenBao. An open redirect vulnerability in the user interface for the OpenID Connect OIDC identity provider allows a remote attacker to redirect unauthenticated users to arbitrary, attacker-controlled websites. By convincing a victim to follow a crafted OIDC link, an attacker...

CVE-2026-115365

A flaw was found in OpenBao. An authenticated attacker can bypass authorization boundaries by assigning specially crafted policy names to tokens, allowing the tokens to reference cached Access Control List ACL policies from other namespaces. This can allow the attacker to gain unauthorized...

Insertion of Sensitive Information into Log File

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File in the processing of plugin parameters. An attacker can cause sensitive input data to be recorded in audit logs by submitting requests with malformed values in the TypeKVPair or TypeHeade...

Insertion of Sensitive Information into Log File

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File in the processing of plugin parameters. An attacker can cause sensitive input data to be recorded in audit logs by submitting requests with malformed values in the TypeKVPair or TypeHeade...

Improper Control of Interaction Frequency

Overview Affected versions of this package are vulnerable to Improper Control of Interaction Frequency due to improper handling of role resolution in the rate limit quota process when processing requests with form-encoded bodies or forwarded certificates. An attacker can bypass backend-specific...

Improper Control of Interaction Frequency

Overview Affected versions of this package are vulnerable to Improper Control of Interaction Frequency due to improper handling of role resolution in the rate limit quota process when processing requests with form-encoded bodies or forwarded certificates. An attacker can bypass backend-specific...

Insufficient Session Expiration

Overview Affected versions of this package are vulnerable to Insufficient Session Expiration in the token renewal process. An attacker can maintain unauthorized access by repeatedly renewing tokens even after the original Kubernetes service account has been deleted. Remediation Upgrade...

Insufficient Logging

Overview Affected versions of this package are vulnerable to Insufficient Logging due to improper audit logging in the sys/generate-root, sys/rekey, and sys/rekey-recovery-key endpoints when request audit logging succeeds but response audit logging fails. An attacker can hinder forensic detection...

Insufficient Logging

Overview Affected versions of this package are vulnerable to Insufficient Logging due to improper audit logging in the sys/generate-root, sys/rekey, and sys/rekey-recovery-key endpoints when request audit logging succeeds but response audit logging fails. An attacker can hinder forensic detection...

Insufficient Logging

Overview Affected versions of this package are vulnerable to Insufficient Logging due to improper audit logging in the sys/generate-root, sys/rekey, and sys/rekey-recovery-key endpoints when request audit logging succeeds but response audit logging fails. An attacker can hinder forensic detection...

Insufficient Logging

Overview Affected versions of this package are vulnerable to Insufficient Logging due to improper audit logging in the sys/generate-root, sys/rekey, and sys/rekey-recovery-key endpoints when request audit logging succeeds but response audit logging fails. An attacker can hinder forensic detection...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the access control evaluation process. An attacker can gain unauthorized access to restricted paths by crafting identity metadata containing wildcard or path segments, which causes explicit deny rules to be...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the access control evaluation process. An attacker can gain unauthorized access to restricted paths by crafting identity metadata containing wildcard or path segments, which causes explicit deny rules to be...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the access control evaluation process. An attacker can gain unauthorized access to restricted paths by crafting identity metadata containing wildcard or path segments, which causes explicit deny rules to be...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the access control evaluation process. An attacker can gain unauthorized access to restricted paths by crafting identity metadata containing wildcard or path segments, which causes explicit deny rules to be...

Incorrect Authorization

Overview github.com/openbao/openbao/sdk/v2/helper/identitytpl is a None Affected versions of this package are vulnerable to Incorrect Authorization. in the access control evaluation process. An attacker can gain unauthorized access to restricted paths by crafting identity metadata containing...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the access control evaluation process. An attacker can gain unauthorized access to restricted paths by crafting identity metadata containing wildcard or path segments, which causes explicit deny rules to be...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization due to insufficient enforcement of root namespace restrictions in the catalog API. An attacker can modify plugin registrations, including removing existing registrations, creating invalid ones, or registering...

Insufficient Session Expiration

Overview Affected versions of this package are vulnerable to Insufficient Session Expiration due to improper expiration checks in the AppRole authentication process. An attacker can gain unauthorized access by using an expired Secret ID that has not yet been removed by the periodic tidy operation...