Tooling — Vulnerabilities & Security Advisories 12

All 12 CVE vulnerabilities found in Tooling, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2026-87993	Consul-template vulnerable to an information disclosure issue in error handling CWE-532	7.7	High	2026-09-10
CVE-2026-8715	Vault Secrets Operator vulnerable to arbitrary file read and credential exfiltration via AppRole secretIDPath CWE-552	9.6	Critical	2026-08-13
CVE-2026-16326	consul-mcp-server vulnerable to cross-tenant credential reuse in streamable-HTTP stateless mode CWE-488	10.0	Critical	2026-07-29
CVE-2026-16328	consul-mcp-server vulnerable to server side request forgery leading to token exposure CWE-918	8.6	High	2026-07-29
CVE-2026-16498	terraform-mcp-server vulnerable to cross-tenant credential reuse in streamable-HTTP stateless mode CWE-488	10.0	Critical	2026-07-28
CVE-2026-16496	terraform-mcp-server vulnerable to cross-user credential inheritance if an MCP session ID is obtained by another user CWE-384	8.9	High	2026-07-28
CVE-2026-14869	terraform-mcp-server vulnerable to server side request forgery leading to token exposure CWE-918	8.6	High	2026-07-28
CVE-2026-14361	Consul-template is vulnerable to path redirection in writeToFile through symlink attack CWE-59	4.7	Medium	2026-07-08
CVE-2026-5061	Consul-template vulnerable to sandbox path bypass in file helper via a symlink attack CWE-59	4.7	Medium	2026-05-12
CVE-2026-4660	Go-getter may allow to arbitrary filesystem reads through git operations CWE-200	7.5	High	2026-04-09
CVE-2025-13357	Vault Terraform Provider Applied Incorrect Defaults for LDAP Auth Method CWE-1188	7.4	High	2025-11-21
CVE-2025-1293	HashiCorp Hermes Improperly Validates AWS ALB JWTs, which May Lead to Authentication Bypass CWE-1390	8.2	High	2025-02-20

All 12 known CVE vulnerabilities affecting Tooling with full Chinese analysis, references, and POCs where available.