Skip to content
OpenAdvisories

Vendor

HashiCorp

142 known vulnerabilities.

Products

Vault Enterprise 52 Vault 46 Consul 27 Consul Enterprise 27 Nomad Enterprise 26 Nomad 24 Tooling 13 Shared library 10 Boundary 5 Boundary Enterprise 4 Terraform Enterprise 3 Vagrant 2 go-slug 1 Packer 1 Terraform 1 go-getter 1 Vagrant < 2.4.0 0 Vault < 1.11.3 0 Vault < 1.10.6 0 Vault < 1.9.9 0 Vault < 1.13.2 0 Vault < 1.13.1 0 Vault < 1.12.5 0 Vault < 1.11.9 0 Terraform Enterprise < v202306-1 0 Vault < 1.15.5 0 Terraform < 1.5.7 0 Vault < 1.13.0 0 Vault < 1.12.4 0 Vault < 1.11.8 0 Vault < 1.10.11 0 Vault < 1.14.0 0 Vault < 1.11.11 0 Vault < 1.12.7 0 Vault < 1.13.3 0 Vault < 1.14.3 0 Vault < 1.13.7 0 Vault < 1.7.6 0 Vault < 1.12.11 0 Vault < 1.8.5 0
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 9.9
    CVE-2026-110720 Public exploit

    Consul-k8s vulnerable to a cross-namespace authorization bypass in component ACL binding rules

    Consul-k8s versions 0.42.0 and later are vulnerable to a cross-namespace authorization bypass in component ACL binding rules that may allow an attacker to obtain elevated Consul privileges. This vulnerability (CVE-2026-110720) is fixed in consul-k8s 2.1.0 and…

    HashiCorp Tooling
  • Critical 9.6
    CVE-2026-8715

    Vault Secrets Operator vulnerable to arbitrary file read and credential exfiltration via AppRole secretIDPath

    Vault Secrets Operator 1.3.0 up to 1.4.1 is vulnerable to an arbitrary file read and credential exfiltration issue in the AppRole authentication configuration that may allow a tenant with limited Kubernetes RBAC permissions to read files from the operator pod…

    HashiCorp Tooling
  • Critical 10.0
    CVE-2026-16326

    consul-mcp-server vulnerable to cross-tenant credential reuse in streamable-HTTP stateless mode

    In consul-mcp-server, versions 0.1.0 up to 0.1.3 did not properly isolate session state in stateless mode, which may allow one client's Consul authentication token to be used for subsequent requests from other clients. This vulnerability (CVE-2026-16326) is f…

    HashiCorp Tooling
  • Critical 10.0
    CVE-2026-16498

    terraform-mcp-server vulnerable to cross-tenant credential reuse in streamable-HTTP stateless mode

    The terraform-mcp-server before version 1.1.0 is vulnerable to a cross-tenant credential reuse issue in the streamable-HTTP stateless transport mode that may allow one user's Terraform token to be used to execute tool calls on behalf of subsequent users. This…

    HashiCorp Tooling
  • Critical 9.1
    CVE-2025-6000

    Arbitrary Remote Code Execution via Plugin Catalog Abuse

    A privileged Vault operator within the root namespace with write permission to {{sys/audit}} may obtain code execution on the underlying host if a plugin directory is set in Vault’s configuration. Fixed in Vault Community Edition 1.20.1 and Vault Enterprise 1…

    HashiCorp Vault Enterprise Vault splunk-otel-collector Wolfi Go
  • Critical 9.8
    CVE-2024-3817

    HashiCorp go-getter Vulnerable to Argument Injection When Fetching Remote Default Git Branches

    HashiCorp’s go-getter library is vulnerable to argument injection when executing Git to discover remote branches. This vulnerability does not affect the go-getter/v2 branch and package.

    HashiCorp Shared library zot kubescape Debian Ubuntu Azure Linux Wolfi Go
  • Critical 10.0
    CVE-2023-1782

    Nomad Unauthenticated Client Agent HTTP Request Privilege Escalation

    HashiCorp Nomad and Nomad Enterprise versions 1.5.0 up to 1.5.2 allow unauthenticated users to bypass intended ACL authorizations for clusters where mTLS is not enabled. This issue is fixed in version 1.5.3.

    HashiCorp Nomad Enterprise Nomad nomad Ubuntu Alpine Go