Log in Start free

openbao

Products

ProductCVEsExploitedLatest
openbao43–Oct 22, 2026
openbao-plugins1–Oct 23, 2025

Exploited and recent CVEs

  • CVE-2026-115369 Low 2.2 OpenBao 2.5.0 before 2.6.2 PKI allowed_ip_sans_cidr Bypass via CSR IP SANs 0.1%
  • CVE-2026-115366 Low 2.6 OpenBao 2.3.0 before 2.6.3 Missing Root Namespace Enforcement in Plugin Catalog APIs 0.2%
  • CVE-2026-115365 Medium 6.6 OpenBao 2.3.0 before 2.6.3 Incorrect Authorization via Policy Cache Namespace Traversal 0.3%
  • CVE-2026-115364 Low 2.2 OpenBao before 2.6.3 Missing Header Check on Agent/Proxy Quit Endpoints 0.3%
  • CVE-2026-115363 Low 3.3 OpenBao 2.2.0 before 2.6.4 and 2.7.0 before 2.7.1 ACME EAB MAC Key Disclosure via Sanitized Configuration 0.1%
  • CVE-2026-115362 Low 2.2 OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Expired AppRole SecretID Authentication Bypass 0.2%
  • CVE-2026-115361 Medium 4.1 OpenBao before 2.6.3 ACL Bypass via Dropped Templated Policy Denial 0.2%
  • CVE-2026-115360 Medium 4.7 OpenBao before 2.6.3 Open Redirect via OIDC Identity Provider UI 0.2%
  • CVE-2026-115359 Low 3.7 OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Role-Based Rate Limit Quota Bypass via Request Parsing 0.2%
  • CVE-2026-115358 Low 2.0 OpenBao before 2.6.3 Sensitive Data Leak in Audit Log via Malformed Parameters 0.2%
  • CVE-2026-115357 Low 2.2 OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Improper Audit Logging of Root Generation and Rekey Responses 0.2%
  • CVE-2026-115356 Medium 5.4 OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Kubernetes Auth Method Token Renewal After Revocation 0.2%
  • CVE-2026-63132 Critical 9.2 OpenBao's Recovery Mode Vulnerable To Token Leakage via Timing Attack 0.6%
  • CVE-2026-63131 Medium 6.0 OpenBao LIST ACL bypass: a trailing-slash LIST request skips a more-specific deny rule (unported Vault v2.0.3 fix) 0.5%
  • CVE-2026-77285 Low 2.4 OpenBao Agent Writes Secrets to Stdout 0.2%
  • CVE-2026-71543 High 7.5 OpenBao's Templated Policies Allow Privilege Escalation via Wildcard Characters 0.4%
  • CVE-2026-55770 Medium 6.8 OpenBao: LDAPi ldaputil (wrong escape func) 0.5%
  • CVE-2026-55776 Medium 6.5 OpenBao: Transit secrets engine crashes on key creation with `derived: true` for asymmetric key types 0.6%
  • CVE-2026-55774 Low 2.1 OpenBao: Cross-namespace lease revocation/renewal via canonical sys/leases/{revoke,renew} — incomplete fix of CVE-2026-45808 0.6%
  • CVE-2026-55775 Low 2.3 OpenBao's System Backend allows Unauthorized Management of the containing Namespace 0.5%
  • CVE-2026-45808 High 7.1 OpenBao's cross-namespace lease revocation via legacy sys/revoke path bypasses ACL 0.4%
  • CVE-2026-46405 Medium 5.3 OpenBao's Kerberos Auth Method Accumulates Unaccessible Tokens 0.6%
  • CVE-2026-46358 Medium 5.4 OpenBao's Inline Auth Incorrectly Redacted Headers 0.2%
  • CVE-2026-42186 Low 2.3 OpenBao's Namespace Deletion May Not Delete Data Properly 0.2%
  • CVE-2026-40264 Low 2.0 OpenBao's Token Store Allows Cross-Namespace Renewal, Revocation 0.3%
  • CVE-2026-39396 Low 3.1 OpenBao has Decompression Bomb via Unbounded Copy in OCI Plugin Extraction (DoS) 0.2%
  • CVE-2026-39388 Low 2.0 OpenBao's Certificate Authentication Allows Token Renewal With Different Certificate 0.1%
  • CVE-2026-39946 Medium 4.6 OpenBao allows SQL Injection in PostgreSQL database secrets engine 0.2%
  • CVE-2026-33758 Critical 9.6 OpenBao has Reflected XSS in its OIDC authentication error message 0.3%
  • CVE-2026-33757 Critical 9.6 OpenBao lacks user confirmation for OIDC direct callback mode 0.4%