# cve.now: Openbao

The newest entries naming Openbao as an affected vendor (up to 200), of 44 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-115369](https://cve.now/CVE-2026-115369.md): OpenBao 2.5.0 before 2.6.2 PKI allowed\_ip\_sans\_cidr Bypass via CSR IP SANs (CVSS 2.1)
- [CVE-2026-115366](https://cve.now/CVE-2026-115366.md): OpenBao 2.3.0 before 2.6.3 Missing Root Namespace Enforcement in Plugin Catalog APIs (CVSS 2.0)
- [CVE-2026-115365](https://cve.now/CVE-2026-115365.md): OpenBao 2.3.0 before 2.6.3 Incorrect Authorization via Policy Cache Namespace Traversal (CVSS 7.5)
- [CVE-2026-115364](https://cve.now/CVE-2026-115364.md): OpenBao before 2.6.3 Missing Header Check on Agent/Proxy Quit Endpoints (CVSS 2.1)
- [CVE-2026-115363](https://cve.now/CVE-2026-115363.md): OpenBao 2.2.0 before 2.6.4 and 2.7.0 before 2.7.1 ACME EAB MAC Key Disclosure via Sanitized Configuration (CVSS 2.1)
- [CVE-2026-115362](https://cve.now/CVE-2026-115362.md): OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Expired AppRole SecretID Authentication Bypass (CVSS 2.1)
- [CVE-2026-115361](https://cve.now/CVE-2026-115361.md): OpenBao before 2.6.3 ACL Bypass via Dropped Templated Policy Denial (CVSS 2.1)
- [CVE-2026-115360](https://cve.now/CVE-2026-115360.md): OpenBao before 2.6.3 Open Redirect via OIDC Identity Provider UI (CVSS 5.3)
- [CVE-2026-115359](https://cve.now/CVE-2026-115359.md): OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Role-Based Rate Limit Quota Bypass via Request Parsing (CVSS 6.3)
- [CVE-2026-115358](https://cve.now/CVE-2026-115358.md): OpenBao before 2.6.3 Sensitive Data Leak in Audit Log via Malformed Parameters (CVSS 2.0)
- [CVE-2026-115357](https://cve.now/CVE-2026-115357.md): OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Improper Audit Logging of Root Generation and Rekey Responses (CVSS 2.1)
- [CVE-2026-115356](https://cve.now/CVE-2026-115356.md): OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Kubernetes Auth Method Token Renewal After Revocation (CVSS 5.3)
- [CVE-2026-63132](https://cve.now/CVE-2026-63132.md): OpenBao's Recovery Mode Vulnerable To Token Leakage via Timing Attack (CVSS 9.2)
- [CVE-2026-63131](https://cve.now/CVE-2026-63131.md): OpenBao LIST ACL bypass: a trailing-slash LIST request skips a more-specific deny rule (unported Vault v2.0.3 fix) (CVSS 6.0)
- [CVE-2026-77285](https://cve.now/CVE-2026-77285.md): OpenBao Agent Writes Secrets to Stdout (CVSS 2.4)
- [CVE-2026-71543](https://cve.now/CVE-2026-71543.md): OpenBao's Templated Policies Allow Privilege Escalation via Wildcard Characters (CVSS 7.5)
- [CVE-2026-55770](https://cve.now/CVE-2026-55770.md): OpenBao: LDAPi ldaputil (wrong escape func) (CVSS 6.8)
- [CVE-2026-55776](https://cve.now/CVE-2026-55776.md): OpenBao: Transit secrets engine crashes on key creation with \`derived: true\` for asymmetric key types (CVSS 6.5)
- [CVE-2026-55774](https://cve.now/CVE-2026-55774.md): OpenBao: Cross-namespace lease revocation/renewal via canonical sys/leases/{revoke,renew} — incomplete fix of CVE-2026-45808 (CVSS 2.1)
- [CVE-2026-55775](https://cve.now/CVE-2026-55775.md): OpenBao's System Backend allows Unauthorized Management of the containing Namespace (CVSS 2.3)
- [CVE-2026-45808](https://cve.now/CVE-2026-45808.md): OpenBao's cross-namespace lease revocation via legacy sys/revoke path bypasses ACL (CVSS 7.1)
- [CVE-2026-46405](https://cve.now/CVE-2026-46405.md): OpenBao's Kerberos Auth Method Accumulates Unaccessible Tokens (CVSS 5.3)
- [CVE-2026-46358](https://cve.now/CVE-2026-46358.md): OpenBao's Inline Auth Incorrectly Redacted Headers (CVSS 5.4)
- [CVE-2026-42186](https://cve.now/CVE-2026-42186.md): OpenBao's Namespace Deletion May Not Delete Data Properly (CVSS 2.3)
- [CVE-2026-40264](https://cve.now/CVE-2026-40264.md): OpenBao's Token Store Allows Cross-Namespace Renewal, Revocation (CVSS 2.0)
- [CVE-2026-39396](https://cve.now/CVE-2026-39396.md): OpenBao has Decompression Bomb via Unbounded Copy in OCI Plugin Extraction (DoS) (CVSS 3.1)
- [CVE-2026-39388](https://cve.now/CVE-2026-39388.md): OpenBao's Certificate Authentication Allows Token Renewal With Different Certificate (CVSS 2.0)
- [CVE-2026-39946](https://cve.now/CVE-2026-39946.md): OpenBao allows SQL Injection in PostgreSQL database secrets engine (CVSS 4.6)
- [CVE-2026-33758](https://cve.now/CVE-2026-33758.md): OpenBao has Reflected XSS in its OIDC authentication error message (CVSS 9.4)
- [CVE-2026-33757](https://cve.now/CVE-2026-33757.md): OpenBao lacks user confirmation for OIDC direct callback mode (CVSS 9.6)
- [CVE-2025-64761](https://cve.now/CVE-2025-64761.md): OpenBao Privileged Operator Identity Group Root Escalation (CVSS 7.5)
- [CVE-2025-59048](https://cve.now/CVE-2025-59048.md): OpenBao AWS Plugin Vulnerable to Cross-Account IAM Role Impersonation in AWS Auth Method (CVSS 8.1)
- [CVE-2025-62705](https://cve.now/CVE-2025-62705.md): OpenBao and Vault Leak \[\]byte Fields in Audit Logs (CVSS 5.7)
- [CVE-2025-62513](https://cve.now/CVE-2025-62513.md): OpenBao leaks HTTPRawBody in Audit Logs (CVSS 5.7)
- [CVE-2025-59043](https://cve.now/CVE-2025-59043.md): OpenBao vulnerable to denial of service via malicious JSON request processing (CVSS 7.5)
- [CVE-2025-55003](https://cve.now/CVE-2025-55003.md): OpenBao Login MFA Bypasses Rate Limiting and TOTP Token Reuse (CVSS 5.7)
- [CVE-2025-55001](https://cve.now/CVE-2025-55001.md): OpenBao LDAP MFA Enforcement Bypass When Using Username As Alias (CVSS 6.5)
- [CVE-2025-55000](https://cve.now/CVE-2025-55000.md): OpenBao TOTP Secrets Engine Enables Code Reuse (CVSS 6.5)
- [CVE-2025-54999](https://cve.now/CVE-2025-54999.md): OpenBao: Timing Side-Channel in Userpass Auth Method (CVSS 3.7)
- [CVE-2025-54998](https://cve.now/CVE-2025-54998.md): OpenBao Userpass and LDAP User Lockout Bypass (CVSS 5.3)
- [CVE-2025-54997](https://cve.now/CVE-2025-54997.md): OpenBao: Privileged Operator May Execute Code on the Underlying Host (CVSS 9.1)
- [CVE-2025-54996](https://cve.now/CVE-2025-54996.md): OpenBao Root Namespace Operator May Elevate Token Privileges (CVSS 7.2)
- [CVE-2025-52894](https://cve.now/CVE-2025-52894.md): OpenBao Vulnerable to Unauthenticated Rekey Operation Cancellation (CVSS 6.9)
- [CVE-2025-52893](https://cve.now/CVE-2025-52893.md): OpenBao May Leak Sensitive Information in Logs When Processing Malformed Data (CVSS 4.5)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/openbao
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.