https://vulnogram.org/ Most recent CVEs assigned by HashiCorp Inc. (hashicorp). https://vulnogram.org/seaview/icons/hashicorp.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:06 GMT https://vulnogram.org/CVE-2026-19585 https://vulnogram.org/CVE-2026-19585 HashiCorp go-getter versions before 1.8.10 and go-getter/v2 versions before 2.2.5 are vulnerable to path traversal during S3 and GCS directory downloads, which may allow files to be written outside the requested destination. This vulnerability (CVE-2… Medium Thu, 08 Oct 2026 15:20:28 GMT https://vulnogram.org/CVE-2026-89322 https://vulnogram.org/CVE-2026-89322 Vault and Vault Enterprise did not consistently evaluate ACL policies against the canonical form of resource and policy names. This may allow an authenticated user with delegated permissions to bypass an explicit deny restriction and access a protect… High Wed, 07 Oct 2026 22:01:37 GMT https://vulnogram.org/CVE-2026-105820 https://vulnogram.org/CVE-2026-105820 Vault's ACL policy cache allowed namespace traversal when policy names contained path traversal constructs. This may allow a token assigned specially crafted policy names to use the capabilities of policies defined in other namespaces, including the… Medium Wed, 07 Oct 2026 21:48:08 GMT https://vulnogram.org/CVE-2026-105816 https://vulnogram.org/CVE-2026-105816 Vault and Vault Enterprise did not consistently verify that stored plugin catalog entries reference binaries within the configured plugin directory. When Vault uses Shamir seals and has an external plugin directory configured, a privileged operator a… High Wed, 07 Oct 2026 21:37:03 GMT https://vulnogram.org/CVE-2026-105818 https://vulnogram.org/CVE-2026-105818 Vault's PKI secrets engine ACME server did not restrict certificate identities that ACME challenges do not validate when issuing certificates under the default directory policy. This may allow an ACME client to obtain a certificate containing unverif… Medium Wed, 07 Oct 2026 21:21:05 GMT https://vulnogram.org/CVE-2026-88922 https://vulnogram.org/CVE-2026-88922 The go-getter library up to versions 1.8.8 and 2.2.3 is vulnerable to a privilege escalation issue in its archive decompression handling that may allow a crafted archive to cause extracted files to be created with elevated permission bits. Where extr… Medium Tue, 15 Sep 2026 19:45:07 GMT https://vulnogram.org/CVE-2026-87993 https://vulnogram.org/CVE-2026-87993 The consul-template library is vulnerable to an information disclosure issue in its error handling path that may allow Vault secret values to appear in template error messages, log output, and downstream surfaces such as Nomad task events. This vulne… High Thu, 10 Sep 2026 19:00:08 GMT https://vulnogram.org/CVE-2026-88021 https://vulnogram.org/CVE-2026-88021 Consul and Consul Enterprise are vulnerable to an authorization bypass in the Connect service mesh that may allow a service to reach a destination it is not authorized to access. When building Envoy RBAC rules to enforce Connect intentions, Consul di… High Thu, 10 Sep 2026 18:58:26 GMT https://vulnogram.org/CVE-2026-87107 https://vulnogram.org/CVE-2026-87107 Consul and Consul Enterprise are vulnerable to an authorization bypass in the catalog deregistration path that may allow a local ACL token to delete peer-imported catalog objects. A caller with {{service:write}} or {{node:write}} permission may explo… Medium Thu, 10 Sep 2026 18:57:35 GMT https://vulnogram.org/CVE-2026-87106 https://vulnogram.org/CVE-2026-87106 Consul and Consul Enterprise are vulnerable to a denial of service in the native RPC listener that may allow an authenticated client to exhaust server memory before ACL authorization is evaluated. A client that can complete the internal RPC mTLS hand… Medium Thu, 10 Sep 2026 18:55:15 GMT https://vulnogram.org/CVE-2026-87090 https://vulnogram.org/CVE-2026-87090 Consul and Consul Enterprise are vulnerable to an authorization bypass in the catalog node-write path that may allow an authenticated attacker to delete another node's catalog registration and take over its node identity. An attacker with a token gra… High Thu, 10 Sep 2026 18:54:45 GMT https://vulnogram.org/CVE-2026-5006 https://vulnogram.org/CVE-2026-5006 A vulnerability was identified in HashiCorp Vault and Vault Enterprise (“Vault”) such that an authenticated attacker may manipulate an identity value referenced by a templated policy path to gain unintended access to Vault paths. An attacker who can… Medium Mon, 24 Aug 2026 20:32:49 GMT https://vulnogram.org/CVE-2026-19589 https://vulnogram.org/CVE-2026-19589 Packer up to 1.15.4 is vulnerable to an issue in the third-party plugin installer that may allow unintended file system modification and could lead to code execution. A user who installs a plugin from a malicious or compromised source may be affected… High Mon, 17 Aug 2026 20:22:19 GMT https://vulnogram.org/CVE-2026-8715 https://vulnogram.org/CVE-2026-8715 Vault Secrets Operator 1.3.0 up to 1.4.1 is vulnerable to an arbitrary file read and credential exfiltration issue in the AppRole authentication configuration that may allow a tenant with limited Kubernetes RBAC permissions to read files from the ope… Critical Thu, 13 Aug 2026 20:27:39 GMT https://vulnogram.org/CVE-2026-14886 https://vulnogram.org/CVE-2026-14886 Vault Enterprise's identity entity batch-delete endpoint is vulnerable to a cross-namespace authorization bypass that may allow an authenticated caller in one namespace to permanently delete the storage backing of entities belonging to another namesp… High Mon, 10 Aug 2026 18:57:13 GMT https://vulnogram.org/CVE-2026-12624 https://vulnogram.org/CVE-2026-12624 Vault’s ACL policy engine did not consistently enforce a wildcard (glob) deny rule against LIST requests made with a trailing slash on the denied path. This may allow a token holding a broader allow rule alongside a narrower wildcard deny rule to enu… Medium Mon, 10 Aug 2026 17:00:46 GMT https://vulnogram.org/CVE-2026-19113 https://vulnogram.org/CVE-2026-19113 Consul Community Edition and Consul Enterprise 1.3.0 through 2.0.2 are vulnerable to an unauthenticated denial of service in several agent HTTP API endpoints. A remote caller could cause the agent to consume substantial memory before the request was… Medium Fri, 07 Aug 2026 19:20:32 GMT https://vulnogram.org/CVE-2026-15972 https://vulnogram.org/CVE-2026-15972 Consul Community Edition and Consul Enterprise 1.13.0 through 2.0.2 are vulnerable to an unauthenticated denial of service through unbounded connection acceptance on the external gRPC listeners. A remote attacker may exhaust agent file descriptors, g… High Fri, 07 Aug 2026 19:20:22 GMT https://vulnogram.org/CVE-2026-15970 https://vulnogram.org/CVE-2026-15970 Consul Community Edition and Consul Enterprise 1.20.1 through 2.0.2 are vulnerable to an L7 intention authorization bypass when a service proxy is configured with a custom public listener. An authenticated mesh workload may reach HTTP paths that are… Medium Fri, 07 Aug 2026 19:20:13 GMT https://vulnogram.org/CVE-2026-19017 https://vulnogram.org/CVE-2026-19017 Consul Community Edition and Consul Enterprise 1.18.21 through 2.0.2 are vulnerable to a partial arbitrary file read when configured to use the Vault Connect CA provider with JWT or AppRole authentication. A privileged attacker with `operator:write`… Medium Fri, 07 Aug 2026 19:19:20 GMT https://vulnogram.org/CVE-2026-19015 https://vulnogram.org/CVE-2026-19015 Consul Community Edition and Consul Enterprise 1.2.0 through 2.0.2 are vulnerable to an uncontrolled resource consumption issue in the Connect CA roots endpoint that may allow a remote caller to grow the agent's Connect CA roots cache without bound,… Medium Fri, 07 Aug 2026 19:19:11 GMT https://vulnogram.org/CVE-2026-19014 https://vulnogram.org/CVE-2026-19014 Consul Community Edition and Consul Enterprise 1.17.0 through 2.0.2 are vulnerable to an uncontrolled resource consumption issue in the Connect authorization endpoint that may allow a caller to grow the agent's intention-match cache without bound, de… Medium Fri, 07 Aug 2026 19:19:05 GMT https://vulnogram.org/CVE-2026-19012 https://vulnogram.org/CVE-2026-19012 Consul Community Edition and Consul Enterprise 1.18.0 through 2.0.2 are vulnerable to an authenticated denial of service in the Enterprise-to-Community Edition downgrade path that may allow an authorized caller to crash the Consul server. A caller wi… Medium Fri, 07 Aug 2026 19:18:59 GMT https://vulnogram.org/CVE-2026-19016 https://vulnogram.org/CVE-2026-19016 Consul Community Edition and Consul Enterprise 1.19.1 through 2.0.2 did not enforce the {{session:write}} ACL permission for session deletion operations submitted through the transaction API. An authenticated caller with network access to the Consul… Medium Fri, 07 Aug 2026 19:18:08 GMT https://vulnogram.org/CVE-2026-16326 https://vulnogram.org/CVE-2026-16326 In consul-mcp-server, versions 0.1.0 up to 0.1.3 did not properly isolate session state in stateless mode, which may allow one client's Consul authentication token to be used for subsequent requests from other clients. This vulnerability (CVE-2026-16… Critical Wed, 29 Jul 2026 18:40:08 GMT https://vulnogram.org/CVE-2026-16328 https://vulnogram.org/CVE-2026-16328 In consul-mcp-server, versions 0.1.0 up to 0.1.3 did not restrict how the Consul backend address was supplied, allowing a connected client to override the server's configured Consul address via a request header. This may allow a malicious client to r… High Wed, 29 Jul 2026 18:32:39 GMT https://vulnogram.org/CVE-2026-16498 https://vulnogram.org/CVE-2026-16498 The terraform-mcp-server before version 1.1.0 is vulnerable to a cross-tenant credential reuse issue in the streamable-HTTP stateless transport mode that may allow one user's Terraform token to be used to execute tool calls on behalf of subsequent us… Critical Tue, 28 Jul 2026 17:57:45 GMT https://vulnogram.org/CVE-2026-16496 https://vulnogram.org/CVE-2026-16496 The terraform-mcp-server before version 1.1.0 is vulnerable to an authorization bypass in the streamable-HTTP stateful transport mode that may allow a user who obtains another user's MCP session ID to have their tool calls executed using that user's… High Tue, 28 Jul 2026 17:57:36 GMT https://vulnogram.org/CVE-2026-14869 https://vulnogram.org/CVE-2026-14869 The terraform-mcp-server before version 1.1.0 is vulnerable to a server-side request forgery issue in the streamable-HTTP transport that may allow an unauthenticated remote client to redirect the server's Terraform API requests, and the server-side a… High Tue, 28 Jul 2026 17:53:58 GMT https://vulnogram.org/CVE-2026-14896 https://vulnogram.org/CVE-2026-14896 HashiCorp Nomad and Nomad Enterprise are vulnerable to a cross-namespace authorization bypass in the dynamic host volumes feature that may allow an operator holding the host volume delete permission in one namespace to delete a sticky volume claim be… Medium Wed, 08 Jul 2026 20:21:16 GMT https://vulnogram.org/CVE-2026-14361 https://vulnogram.org/CVE-2026-14361 The consul-template library before version 0.42.1 is vulnerable to a path redirection issue in the writeToFile template helper that may allow template output to be written outside the intended directory or to overwrite an existing file. This vulnerab… Medium Wed, 08 Jul 2026 20:11:32 GMT https://vulnogram.org/CVE-2026-14891 https://vulnogram.org/CVE-2026-14891 HashiCorp Nomad and Nomad Enterprise are vulnerable to a sandbox escape in the Docker task driver that may allow a job submitter to bind-mount a host path into a container even when volume bind mounts are disabled, potentially leading to reading and… High Wed, 08 Jul 2026 20:09:05 GMT https://vulnogram.org/CVE-2026-14373 https://vulnogram.org/CVE-2026-14373 HashiCorp Nomad and Nomad Enterprise did not enforce the allow_privileged restriction for the Docker task driver's host namespace mode options. This may allow an authenticated job submitter to run a container in a host namespace and access informatio… High Wed, 08 Jul 2026 17:29:30 GMT https://vulnogram.org/CVE-2026-14362 https://vulnogram.org/CVE-2026-14362 HashiCorp memberlist before version 0.6.0 is vulnerable to a denial-of-service issue in its push/pull state handling that may allow an attacker with network access to the gossip port to exhaust memory on a receiving node and cause the process to term… Medium Wed, 08 Jul 2026 17:14:18 GMT https://vulnogram.org/CVE-2026-14468 https://vulnogram.org/CVE-2026-14468 HashiCorp Terraform Enterprise contained an issue in its version control system (VCS) ingestion of registry modules that did not correctly enforce the intended boundary on packaged module content. This may allow an authenticated user to include files… High Mon, 06 Jul 2026 20:59:47 GMT https://vulnogram.org/CVE-2026-5051 https://vulnogram.org/CVE-2026-5051 HashiCorp Vault and Vault Enterprise prior to 2.0.1 audit device validation logic did not consistently apply plugin directory protections when the legacy file audit path option was used. This vulnerability (CVE-2026-5051) is fixed in 2.0.1, 1.21.6, 1… Medium Wed, 01 Jul 2026 17:10:56 GMT https://vulnogram.org/CVE-2026-7474 https://vulnogram.org/CVE-2026-7474 HashiCorp Nomad and Nomad Enterprise prior to 2.0.1 are vulnerable to code execution on the client host through a path traversal attack. This vulnerability (CVE-2026-7474) is fixed in Nomad 2.0.1, 1.11.5 and 1.10.11. High Tue, 12 May 2026 19:09:44 GMT https://vulnogram.org/CVE-2026-8052 https://vulnogram.org/CVE-2026-8052 HashiCorp Nomad’s exec2 task driver prior to 0.1.2 is vulnerable to arbitrary file read and write on the client host as the Nomad process user through a symlink attack. This vulnerability (CVE-2026-8052) is fixed in version 0.1.2 of the exec2 task dr… Medium Tue, 12 May 2026 19:09:15 GMT https://vulnogram.org/CVE-2026-6959 https://vulnogram.org/CVE-2026-6959 HashiCorp Nomad and Nomad Enterprise prior to 2.0.1 are vulnerable to arbitrary file read and write on the client host as the Nomad process user through a symlink attack. This vulnerability (CVE-2026-6959) is fixed in Nomad 2.0.1, 1.11.5 and 1.10.11. Medium Tue, 12 May 2026 18:59:09 GMT https://vulnogram.org/CVE-2026-5061 https://vulnogram.org/CVE-2026-5061 The consul-template library before version 0.42.0 is vulnerable to a sandbox path bypass in the file template helper that may allow reading an out-of-sandbox file. This vulnerability (CVE-2026-5061) is fixed in consul-template 0.42.0. Medium Tue, 12 May 2026 13:58:20 GMT https://vulnogram.org/CVE-2026-7776 https://vulnogram.org/CVE-2026-7776 Boundary Community Edition and Boundary Enterprise (“Boundary”) workers are vulnerable to a denial-of-service condition during node enrollment TLS handshakes. An attacker with network access to the worker authentication listener may open a connection… High Mon, 04 May 2026 21:34:10 GMT https://vulnogram.org/CVE-2026-5807 https://vulnogram.org/CVE-2026-5807 Vault is vulnerable to a denial-of-service condition where an unauthenticated attacker can repeatedly initiate or cancel root token generation or rekey operations, occupying the single in-progress operation slot. This prevents legitimate operators fr… High Network Exploitable Fri, 17 Apr 2026 03:22:13 GMT https://vulnogram.org/CVE-2026-4525 https://vulnogram.org/CVE-2026-4525 If a Vault auth mount is configured to pass through the "Authorization" header, and the "Authorization" header is used to authenticate to Vault, Vault forwarded the Vault token to the auth plugin backend. Fixed in 2.0.0, 1.21.5, 1.20.10, and 1.19.16. High Fri, 17 Apr 2026 03:00:47 GMT https://vulnogram.org/CVE-2026-5052 https://vulnogram.org/CVE-2026-5052 Vault’s PKI engine’s ACME validation did not reject local targets when issuing http-01 and tls-alpn-01 challenges. This may lead to these requests being sent to local network targets, potentially leading to information disclosure. Fixed in Vault Comm… Medium Fri, 17 Apr 2026 02:55:25 GMT https://vulnogram.org/CVE-2026-3605 https://vulnogram.org/CVE-2026-3605 An authenticated user with access to a kvv2 path through a policy containing a glob may be able to delete secrets they were not authorized to read or write, resulting in denial-of-service. This vulnerability did not allow a malicious user to delete s… High Fri, 17 Apr 2026 02:44:42 GMT https://vulnogram.org/CVE-2026-4660 https://vulnogram.org/CVE-2026-4660 HashiCorp’s go-getter library up to v1.8.5 may allow arbitrary file reads on the file system during certain git operations through a maliciously crafted URL. This vulnerability, CVE-2026-4660, is fixed in go-getter v1.8.6. This vulnerability does not… High Network Exploitable Thu, 09 Apr 2026 13:47:46 GMT https://vulnogram.org/CVE-2026-2808 https://vulnogram.org/CVE-2026-2808 HashiCorp Consul and Consul Enterprise 1.18.20 up to 1.21.10 and 1.22.4 are vulnerable to arbitrary file read when configured with Kubernetes authentication. This vulnerability, CVE-2026-2808, is fixed in Consul 1.18.21, 1.21.11 and 1.22.5. Medium Wed, 11 Mar 2026 23:08:32 GMT https://vulnogram.org/CVE-2026-0969 https://vulnogram.org/CVE-2026-0969 The serialize function used to compile MDX in next-mdx-remote is vulnerable to arbitrary code execution due to insufficient sanitization of MDX content. This vulnerability, CVE-2026-0969, is fixed in next-mdx-remote 6.0.0. High Thu, 12 Feb 2026 01:35:06 GMT https://vulnogram.org/CVE-2025-13357 https://vulnogram.org/CVE-2025-13357 Vault’s Terraform Provider incorrectly set the default deny_null_bind parameter for the LDAP auth method to false by default, potentially resulting in an insecure configuration. If the underlying LDAP server allowed anonymous or unauthenticated binds… High Fri, 21 Nov 2025 15:02:27 GMT https://vulnogram.org/CVE-2025-13432 https://vulnogram.org/CVE-2025-13432 Terraform state versions can be created by a user with specific but insufficient permissions in a Terraform Enterprise workspace. This may allow for the alteration of infrastructure if a subsequent plan operation is approved by a user with approval p… Medium Fri, 21 Nov 2025 14:20:53 GMT