12 matches found
vault-cve-2026-5006-audit
CVE-2026-5006 툴킷 HCSEC-2026-32 Vault 템플릿 기반 정책 슬래시 주입 취약점을 다루기 위한 두 가지 도구: 문제를 설명하고 범위를 파악하기 위한 대화형 워크스루와, 라이브 클러스터를 점검하여 결과를 Markdown으로 작성하는 감사 스크립트입니다. vault-cve-2026-5006-walkthrough.html - 문제에 대한 대화형 독립형 워크스루 vault-cve-2026-5006-audit.sh - 4개의 보고서를 생성하는 읽기 전용 클러스터 감사 한 문단으로 요약한 취약점 Vault 정책...
CVE-2026-5006
A flaw was found in HashiCorp Vault. An authenticated attacker can manipulate identity values in templated policy paths by injecting slash characters. This manipulation allows Vault to misinterpret policy paths, leading to unintended access to Vault resources and potential privilege escalation...
html/template: golang: Go html/template: Cross-Site Scripting via pathological input
A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...
html/template: golang: Go html/template: Cross-Site Scripting via pathological input
A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...
BIT-VAULT-2026-5006 Vault Vulnerable to Privilege Escalation via Slash Injection in Templated Policy Paths
A vulnerability was identified in HashiCorp Vault and Vault Enterprise “Vault” such that an authenticated attacker may manipulate an identity value referenced by a templated policy path to gain unintended access to Vault paths. An attacker who can control the referenced identity value may include...
Security Bulletin: Vault Vulnerable to Privilege Escalation via Slash Injection in Templated Policy Paths
Summary A vulnerability was identified in HashiCorp Vault and Vault Enterprise “Vault” such that an authenticated attacker may manipulate an identity value referenced by a templated policy path to gain unintended access to Vault paths. An attacker who can control the referenced identity value may...
Vault Vulnerable to Privilege Escalation via Slash Injection in Templated Policy Paths
Summary A vulnerability was identified in HashiCorp Vault and Vault Enterprise “Vault” such that an authenticated attacker may manipulate an identity value referenced by a templated policy path to gain unintended access to Vault paths. An attacker who can control the referenced identity value may...
CVE-2026-5006 Vault Vulnerable to Privilege Escalation via Slash Injection in Templated Policy Paths
A vulnerability was identified in HashiCorp Vault and Vault Enterprise “Vault” such that an authenticated attacker may manipulate an identity value referenced by a templated policy path to gain unintended access to Vault paths. An attacker who can control the referenced identity value may include...
CVE-2026-5006 Vault Vulnerable to Privilege Escalation via Slash Injection in Templated Policy Paths
A vulnerability was identified in HashiCorp Vault and Vault Enterprise “Vault” such that an authenticated attacker may manipulate an identity value referenced by a templated policy path to gain unintended access to Vault paths. An attacker who can control the referenced identity value may include...
CVE-2026-5006 Vault Vulnerable to Privilege Escalation via Slash Injection in Templated Policy Paths
A vulnerability was identified in HashiCorp Vault and Vault Enterprise “Vault” such that an authenticated attacker may manipulate an identity value referenced by a templated policy path to gain unintended access to Vault paths. An attacker who can control the referenced identity value may include...
PT-2026-81031
Name of the Vulnerable Software and Affected Versions HashiCorp Vault versions prior to 2.0.4 HashiCorp Vault Enterprise versions prior to 2.0.4 HashiCorp Vault Enterprise versions prior to 1.21.9 HashiCorp Vault Enterprise versions prior to 1.20.14 HashiCorp Vault Enterprise versions prior to...
CVE-2026-56858 Fix Javascript regexp context tracking in html/template
Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS...