Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

openbao — Vulnerabilities & Security Advisories 43

All 43 CVE vulnerabilities found in openbao, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security advisories and vulnerability reports specifically for the openbao product, focusing on cryptographic key management weaknesses and access control bypasses. The collection encompasses a wide spectrum of identified flaws ranging from memory corruption and privilege escalation to insecure default configurations, covering the period from the project's initial public release through the most recent quarterly security updates. Visitors can utilize this resource to track the vendor's official security advisories over time, analyze the prevalence and impact of specific weakness classes within the openbao ecosystem, or review the complete historical record of vulnerabilities affecting this particular software to inform risk assessment and remediation strategies. The data presented here serves as a centralized reference for security professionals seeking to understand the evolving threat landscape associated with openbao without relying on fragmented external sources or unverified third-party reports. By consolidating these findings, the page enables efficient monitoring of patch availability and helps organizations maintain an up-to-date posture against known exploits targeting the openbao platform. All entries are verified against official release notes and community-confirmed disclosures to ensure accuracy and relevance for defensive security operations.

Vendor: openbao

CVE ID Title CVSS Severity Published
CVE-2026-115369 OpenBao 2.5.0 before 2.6.2 PKI allowed_ip_sans_cidr Bypass via CSR IP SANs CWE-863 2.2 Low 2026-10-22
CVE-2026-115366 OpenBao 2.3.0 before 2.6.3 Missing Root Namespace Enforcement in Plugin Catalog APIs CWE-863 2.6 Low 2026-10-22
CVE-2026-115365 OpenBao 2.3.0 before 2.6.3 Incorrect Authorization via Policy Cache Namespace Traversal CWE-863 6.6 Medium 2026-10-22
CVE-2026-115364 OpenBao before 2.6.3 Missing Header Check on Agent/Proxy Quit Endpoints CWE-862 2.2 Low 2026-10-22
CVE-2026-115363 OpenBao 2.2.0 before 2.6.4 and 2.7.0 before 2.7.1 ACME EAB MAC Key Disclosure via Sanitized Configuration CWE-212 3.3 Low 2026-10-22
CVE-2026-115362 OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Expired AppRole SecretID Authentication Bypass CWE-613 2.2 Low 2026-10-22
CVE-2026-115361 OpenBao before 2.6.3 ACL Bypass via Dropped Templated Policy Denial CWE-863 4.1 Medium 2026-10-22
CVE-2026-115359 OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Role-Based Rate Limit Quota Bypass via Request Parsing CWE-799 3.7 Low 2026-10-22
CVE-2026-115360 OpenBao before 2.6.3 Open Redirect via OIDC Identity Provider UI CWE-601 4.7 Medium 2026-10-22
CVE-2026-115358 OpenBao before 2.6.3 Sensitive Data Leak in Audit Log via Malformed Parameters CWE-532 2.0 Low 2026-10-22
CVE-2026-115356 OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Kubernetes Auth Method Token Renewal After Revocation CWE-613 5.4 Medium 2026-10-22
CVE-2026-115357 OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Improper Audit Logging of Root Generation and Rekey Responses CWE-778 2.2 Low 2026-10-22
CVE-2026-63132 OpenBao's Recovery Mode Vulnerable To Token Leakage via Timing Attack CWE-208 9.2 Critical 2026-09-23
CVE-2026-63131 OpenBao LIST ACL bypass: a trailing-slash LIST request skips a more-specific deny rule (unported Vault v2.0.3 fix) CWE-863 6.0 Medium 2026-09-23
CVE-2026-77285 OpenBao Agent Writes Secrets to Stdout CWE-532 2.4 Low 2026-09-23
CVE-2026-71543 OpenBao's Templated Policies Allow Privilege Escalation via Wildcard Characters CWE-863 7.5 High 2026-09-21
CVE-2026-55770 OpenBao: LDAPi ldaputil (wrong escape func) CWE-90 6.8 Medium 2026-09-15
CVE-2026-55776 OpenBao: Transit secrets engine crashes on key creation with `derived: true` for asymmetric key types CWE-617 6.5 Medium 2026-09-15
CVE-2026-55774 OpenBao: Cross-namespace lease revocation/renewal via canonical sys/leases/{revoke,renew} — incomplete fix of CVE-2026-45808 CWE-863 2.1 Low 2026-09-15
CVE-2026-55775 OpenBao's System Backend allows Unauthorized Management of the containing Namespace CWE-285 2.3 Low 2026-09-15
CVE-2026-45808 OpenBao's cross-namespace lease revocation via legacy sys/revoke path bypasses ACL CWE-863 7.1 High 2026-08-07
CVE-2026-46405 OpenBao's Kerberos Auth Method Accumulates Unaccessible Tokens CWE-770 5.3 Medium 2026-08-07
CVE-2026-46358 OpenBao's Inline Auth Incorrectly Redacted Headers CWE-532 5.4 Medium 2026-08-07
CVE-2026-42186 OpenBao's Namespace Deletion May Not Delete Data Properly CWE-212 - - 2026-05-14
CVE-2026-40264 OpenBao's Token Store Allows Cross-Namespace Renewal, Revocation CWE-1259 8.1AI High AI 2026-04-21
CVE-2026-39396 OpenBao has Decompression Bomb via Unbounded Copy in OCI Plugin Extraction (DoS) CWE-400 3.1 Low 2026-04-21
CVE-2026-39388 OpenBao's Certificate Authentication Allows Token Renewal With Different Certificate CWE-295 7.5AI High AI 2026-04-21
CVE-2026-39946 OpenBao allows SQL Injection in PostgreSQL database secrets engine CWE-89 8.8 - 2026-04-21
CVE-2026-33758 OpenBao has Reflected XSS in its OIDC authentication error message CWE-20 6.1 - 2026-03-27
CVE-2026-33757 OpenBao lacks user confirmation for OIDC direct callback mode CWE-384 9.6 Critical 2026-03-27

All 43 known CVE vulnerabilities affecting openbao with full Chinese analysis, references, and POCs where available.