Skip to content
OpenAdvisories
Medium WID-SEC-2026-2028 4 CVEs

OpenBao: Mehrere Schwachstellen

Published Jun 21, 2026 · Updated Sep 15, 2026 · Revision 2 · de-DE

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in OpenBao ausnutzen, um Administratorrechte zu erlangen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand zu verursachen.

Product

OpenBao ist eine Open-Source-Lösung für Secrets Management, die sensible Daten wie Passwörter, API-Schlüssel und Zertifikate sicher speichert und verwaltet.

Vulnerabilities 4

  • Medium 6.8
    CVE-2026-55770

    OpenBao: LDAPi ldaputil (wrong escape func)

    OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, OpenBao used EscapeLDAPValue, an RFC 4514 distinguished-name escaping function, where RFC 4515 LDAP search-filter escaping was required in sdk/helper/ldaputil/client.go GetUse…

    openbao openbao github.com/openbao/openbao Go
  • Medium 6.5
    CVE-2026-55776

    OpenBao: Transit secrets engine crashes on key creation with `derived: true` for asymmetric key types

    OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, an authenticated OpenBao caller with write access to transit/keys/* could terminate the server process by setting derived to true while the type parameter selected rsa-, ecdsa…

    openbao openbao github.com/openbao/openbao Go
  • Low 2.3
    CVE-2026-55775

    OpenBao's System Backend allows Unauthorized Management of the containing Namespace

    OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, OpenBao users granted capabilities on /sys/namespaces/root within a non-root namespace could exploit special handling of the literal root path in namespace canonicalization. T…

    openbao openbao github.com/openbao/openbao Go
  • Low 2.1
    CVE-2026-55774

    OpenBao: Cross-namespace lease revocation/renewal via canonical sys/leases/{revoke,renew} — incomplete fix of CVE-2026-45808

    OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, an OpenBao user with access to sys/leases/revoke/:lease_id in one namespace could revoke a lease in another namespace when the foreign lease_id was known, bypassing namespace …

    openbao openbao github.com/openbao/openbao Go

Revision history

  1. #2

    Referenz(en) aufgenommen: EUVD-2026-78681, EUVD-2026-78683, EUVD-2026-78682, EUVD-2026-78680

  2. #1

    Initiale Fassung

References