Advisoriesby Ibis
OpenBao security advisories
33 advisories · 6 critical or high in 12 months · latest Sep 22
33 advisories
OpenBao Skips Stricter Deny Policy for LIST operationsCVE-2026-63131fixed in 0.0.0-20260713133043-f58d848c139eOpenBao's Recovery Mode Vulnerable To Token Leakage via Timing AttackCVE-2026-63132fixed in 0.0.0-20260713141742-763625a20721OpenBao's Templated Policies Allow Privilege Escalation via Wildcard CharactersCVE-2026-71543fixed in 0.0.0-20260710001938-2d4ebafec5c5OpenBao Agent Writes Secrets to StdoutCVE-2026-77285fixed in 0.0.0-20260714163218-90272575e5f5OpenBao: Transit secrets engine crashes on key creation with `derived: true` for asymmetric key typesCVE-2026-55776fixed in 0.0.0-20260617104123-db57c62602b2OpenBao's System Backend allows Unauthorized Management of the containing NamespaceCVE-2026-55775fixed in 0.0.0-20260617103935-d3c1cc64b1aeOpenBao: improper authorizationCVE-2026-55774fixed in 0.0.0-20260617103932-b20b999dd404OpenBao: LDAPi ldaputil (wrong escape func)CVE-2026-55770fixed in 0.0.0-20260617104213-10b7825c714cOpenBao's Kerberos Auth Method Accumulates Unaccessible TokensCVE-2026-46405fixed in 2.5.4OpenBao's Inline Auth Incorrectly Redacted HeadersCVE-2026-46358fixed in 2.5.4OpenBao's cross-namespace lease revocation via legacy sys/revoke path bypasses ACLCVE-2026-45808fixed in 2.5.4OpenBao's Namespace Deletion May Not Delete Data ProperlyCVE-2026-42186fixed in 0.0.0-20260420173541-6d2e0506e2b4OpenBao's Token Store Allows Cross-Namespace Renewal, RevocationCVE-2026-40264fixed in 0.0.0-20260420162526-f58111d2ca54OpenBao's SQL Injection in PostgreSQL database secrets engineCVE-2026-39946fixed in 0.0.0-20260420155735-b596b0882620OpenBao: Decompression Bomb via Unbounded Copy in OCI Plugin Extraction (DoS)CVE-2026-39396fixed in 0.0.0-20260420180337-2b2a901aa9f7OpenBao's Certificate Authentication Allows Token Renewal With Different CertificateCVE-2026-39388fixed in 0.0.0-20260420160924-abe84e1af4c3OpenBao has Reflected XSS in its OIDC authentication error messageCVE-2026-33758fixed in 0.0.0-20260325133417-6e2b2dd84f0eOpenBao lacks user confirmation for OIDC direct callback modeCVE-2026-33757fixed in 0.0.0-20260325142553-e32103951925OpenBao is Vulnerable to Privileged Operator Identity Group Root EscalationCVE-2025-64761fixed in 2.4.4OpenBao and Vault Leak []byte Fields in Audit LogsCVE-2025-62705fixed in 0.0.0-20251022165510-cc2c476bac66OpenBao leaks HTTPRawBody in Audit LogsCVE-2025-62513fixed in 0.0.0-20251022165510-cc2c476bac66OpenBao has potential Denial of Service vulnerability when processing malicious unauthenticated JSON requestsCVE-2025-59043fixed in 2.4.1OpenBao LDAP MFA Enforcement Bypass When Using Username As AliasCVE-2025-55001fixed in 0.0.0-20250807212521-c52795c1ef74 +1OpenBao Login MFA Bypass of Rate Limiting and TOTP Token ReuseCVE-2025-55003fixed in 0.0.0-20250807113757-8340a6918f6c +1OpenBao TOTP Secrets Engine Code ReuseCVE-2025-55000fixed in 0.0.0-20250806193153-183891f8d535 +1OpenBao has a Timing Side-Channel in the Userpass Auth MethodCVE-2025-54999fixed in 0.0.0-20250806193356-4d9b5d3d6486 +1OpenBao Userpass and LDAP User Lockout BypassCVE-2025-54998fixed in 0.0.0-20250807212521-c52795c1ef74 +1Privileged OpenBao Operator May Execute Code on the Underlying HostCVE-2025-54997fixed in 0.0.0-20250806194004-a14053c9679d +1OpenBao Root Namespace Operator May Elevate Token PrivilegesCVE-2025-54996fixed in 0.0.0-20250806193240-9b0b5d4f345f +1OpenBao allows cancellation of root rekey and recovery rekey operations without authenticationCVE-2025-52894fixed in 0.0.0-20250625150133-fe75468822a2
Hashicorp Vault vulnerable to denial of service through memory exhaustionCVE-2024-8185fixed in 1.18.1 +1Vault Community Edition privilege escalation vulnerabilityCVE-2024-9180fixed in 1.18.0 +1Vault SSH Secrets Engine Configuration Did Not Restrict Valid Principals By DefaultCVE-2024-7594fixed in 0.0.0-20241003222810-d5b4e9224698 +1About OpenBao
OpenBao is a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys.
Packages watched: github.com/openbao/openbao (Go).