Hashicorp vulnerabilities
139 CVEs and advisories name Hashicorp as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-13303Boundary vulnerable to server-side request forgery in Vault credential store
- CVE-2026-119168Nomad allocation data migration may allow host directory permission modification via symlink following
- CVE-2026-107347Nomad dispatch payload writes can escape the allocation directory through symlinks
- CVE-2026-102260Nomad vulnerable to cross-namespace information disclosure in multiple endpoints
- CVE-2026-110720Consul-k8s vulnerable to a cross-namespace authorization bypass in component ACL binding rules
- CVE-2026-115804Consul vulnerable to an authorization bypass in health check registration
- CVE-2026-105626Consul vulnerable to a denial of service in HTTP APIs
- CVE-2026-105608Consul vulnerable to an authorization bypass in service mesh registration
- CVE-2026-105765Consul vulnerable to an authorization bypass in the agent's service mesh leaf certificate API
- CVE-2026-19585Go-getter vulnerable to a path traversal in S3/GCS directory download handling
- CVE-2026-89322Vault ACL Policy Evaluation May Allow Bypass of Deny Restrictions
- CVE-2026-105820Vault ACL Policy Cache Vulnerable to Cross-Namespace Policy Resolution
- CVE-2026-105816Vault Vulnerable to Arbitrary Code Execution via Plugin Catalog Entries Restored From Raft Snapshots
- CVE-2026-105818Vault PKI ACME Issues Certificate With Unvalidated SANs
- CVE-2026-88922Go-getter vulnerable to a privilege escalation issue in its archive decompression handling
- CVE-2026-87993Consul-template vulnerable to an information disclosure issue in error handling
- CVE-2026-88021Consul vulnerable to an authorization bypass in the Connect service mesh
- CVE-2026-87107Consul vulnerable to an authorization bypass in the catalog deregistration path
- CVE-2026-87106Consul vulnerable to a denial of service in the native RPC listener
- CVE-2026-87090Consul vulnerable to an authorization bypass in the catalog node-write path
- CVE-2026-5006Vault Vulnerable to Privilege Escalation via Slash Injection in Templated Policy Paths
- CVE-2026-14978Unicode normalization mismatch in go-slug ignore pattern matching may bypass intended file exclusions
- CVE-2026-19589Packer vulnerable to arbitrary file write via crafted plugin archive during installation
- CVE-2026-8715Vault Secrets Operator vulnerable to arbitrary file read and credential exfiltration via AppRole secretIDPath
- CVE-2026-14886Vault Enterprise vulnerable to cross-namespace entity deletion
- CVE-2026-12624Vault vulnerable to LIST authorization bypass via trailing-slash strip
- CVE-2026-19113Unauthenticated denial of service via unbounded request body processing
- CVE-2026-15972Unauthenticated denial of service via unbounded external gRPC connection acceptance
- CVE-2026-15970L7 intention authorization bypass via custom public listener
- CVE-2026-19017Consul vulnerable to partial arbitrary file read via Vault Connect CA provider