openbao

8 known vulnerabilities in openbao, 1 critical, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-77285 CVSS 2.4 low OpenBao is an open source identity-based secrets management system. Prior to 2.6.0, OpenBao Agent's exec rendering mode could write…
  • CVE-2026-63132 CVSS 9.2 critical OpenBao is an open source identity-based secrets management system. Prior to 2.6.0, OpenBao's handleLogicalRecovery path in…
  • CVE-2026-63131 CVSS 6.0 medium OpenBao is an open source identity-based secrets management system. Prior to 2.6.0, OpenBao's vault/policy/acl.go could evaluate a broader…
  • CVE-2026-71543 CVSS 7.5 high OpenBao is an open source identity-based secrets management system. Prior to 2.6.0, templated ACL, PKI, and SSH policies could substitute…
  • CVE-2026-55776 CVSS 6.5 medium OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, an authenticated OpenBao caller with write access to…
  • CVE-2026-55775 CVSS 2.3 low OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, OpenBao users granted capabilities on…
  • CVE-2026-55774 CVSS 2.1 low OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, an OpenBao user with access to…
  • CVE-2026-55770 CVSS 6.8 medium OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, OpenBao used EscapeLDAPValue, an RFC 4514…