Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Consul — Vulnerabilities & Security Advisories 19

All 19 CVE vulnerabilities found in Consul, with AI-generated Chinese analysis, references, and POCs.

This page provides a comprehensive aggregation of vulnerabilities associated with HashiCorp Consul, categorized under various Common Weakness Enumeration (CWE) tags. It serves as a central repository for security researchers and administrators seeking to understand the threat landscape surrounding this distributed service networking solution. The content collected here encompasses a wide spectrum of vulnerability types, including but not limited to remote code execution, information disclosure, denial of service, and authentication bypass flaws. These entries are meticulously curated to cover a substantial historical time range, allowing users to analyze trends and assess the long-term security posture of the product. By consolidating data from multiple sources, the page offers a unified view of security incidents affecting Consul over several years, ensuring that no critical patch or advisory is overlooked amidst the noise of individual bug reports. Here, you can discover how to track official advisories released by HashiCorp, gain a deeper understanding of specific weakness classes as they apply to service mesh architectures, and look up the complete vulnerability history of Consul. This resource enables you to correlate internal incidents with known external threats, facilitating more effective risk management and timely remediation strategies. Whether you are conducting a retrospective audit or preparing for a new deployment, this aggregation helps you identify recurring patterns, evaluate the severity of past issues, and prioritize security updates based on comprehensive historical data.

Vendor: HashiCorp

CVE ID Title CVSS Severity Published
CVE-2026-19113 Unauthenticated denial of service via unbounded request body processing CWE-400 5.3 Medium 2026-08-07
CVE-2026-15972 Unauthenticated denial of service via unbounded external gRPC connection acceptance CWE-770 7.5 High 2026-08-07
CVE-2026-15970 L7 intention authorization bypass via custom public listener CWE-647 4.2 Medium 2026-08-07
CVE-2026-19017 Consul vulnerable to partial arbitrary file read via Vault Connect CA provider CWE-862 6.8 Medium 2026-08-07
CVE-2026-19015 Uncontrolled resource consumption in the Consul Connect CA roots endpoint CWE-770 5.3 Medium 2026-08-07
CVE-2026-19014 Uncontrolled resource consumption in the Consul Connect authorization endpoint CWE-770 4.3 Medium 2026-08-07
CVE-2026-19012 Authenticated denial of service in Consul Enterprise-to-Community Edition downgrade path CWE-476 5.3 Medium 2026-08-07
CVE-2026-19016 Authorization bypass for session deletion in the transaction API CWE-22 4.2 Medium 2026-08-07
CVE-2026-2808 Consul vulnerable to arbitrary file reads through the vault kubernetes authentication provider CWE-59 6.8 Medium 2026-03-11
CVE-2025-11374 Consul's KV endpoint is vulnerable to denial of service CWE-770 6.5 Medium 2025-10-28
CVE-2025-11375 Consul's event endpoint is vulnerable to denial of service CWE-770 6.5 Medium 2025-10-28
CVE-2024-10086 Consul Vulnerable To Reflected XSS On Content-Type Error Manipulation CWE-79 6.1 Medium 2024-10-30
CVE-2024-10006 Consul L7 Intentions Vulnerable To Headers Bypass CWE-644 8.3 High 2024-10-30
CVE-2024-10005 Consul L7 Intentions Vulnerable To URL Path Bypass CWE-22 8.1 High 2024-10-30
CVE-2023-3518 JWT Auth in L7 Intentions Allow For Mismatched Service Identity and JWT Providers for Access CWE-266 7.4 High 2023-08-09
CVE-2023-1297 Consul Cluster Peering can Result in Denial of Service CWE-826 4.9 Medium 2023-06-02
CVE-2023-2816 Consul Envoy Extension Downsteam Proxy Configuration By Upstream Service Owner CWE-266 8.7 High 2023-06-02
CVE-2023-0845 Consul Server Panic when Ingress and API Gateways Configured with Peering CWE-476 4.9 Medium 2023-03-09
CVE-2022-3920 Consul Peering Imported Nodes/Services Leak CWE-862 5.3 Medium 2022-11-15

All 19 known CVE vulnerabilities affecting Consul with full Chinese analysis, references, and POCs where available.