Skip to content
OpenAdvisories

Vendor

HashiCorp

139 known vulnerabilities.

Products

Vault Enterprise 49 Vault 43 Consul 27 Consul Enterprise 27 Nomad Enterprise 26 Nomad 24 Tooling 13 Shared library 10 Boundary 5 Boundary Enterprise 4 Terraform Enterprise 3 Vagrant 2 go-slug 1 Packer 1 Terraform 1 go-getter 1 Vagrant < 2.4.0 0 Vault < 1.11.3 0 Vault < 1.10.6 0 Vault < 1.9.9 0 Vault < 1.13.2 0 Vault < 1.13.1 0 Vault < 1.12.5 0 Vault < 1.11.9 0 Terraform Enterprise < v202306-1 0 Vault < 1.15.5 0 Terraform < 1.5.7 0 Vault < 1.13.0 0 Vault < 1.12.4 0 Vault < 1.11.8 0 Vault < 1.10.11 0 Vault < 1.14.0 0 Vault < 1.11.11 0 Vault < 1.12.7 0 Vault < 1.13.3 0 Vault < 1.14.3 0 Vault < 1.13.7 0 Vault < 1.7.6 0 Vault < 1.12.11 0 Vault < 1.8.5 0
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.9
    CVE-2026-110720 Public exploit

    Consul-k8s vulnerable to a cross-namespace authorization bypass in component ACL binding rules

    Consul-k8s versions 0.42.0 and later are vulnerable to a cross-namespace authorization bypass in component ACL binding rules that may allow an attacker to obtain elevated Consul privileges. This vulnerability (CVE-2026-110720) is fixed in consul-k8s 2.1.0 and…

    HashiCorp Tooling
  • Medium 6.8
    CVE-2026-5006 Public exploit

    Vault Vulnerable to Privilege Escalation via Slash Injection in Templated Policy Paths

    A vulnerability was identified in HashiCorp Vault and Vault Enterprise (“Vault”) such that an authenticated attacker may manipulate an identity value referenced by a templated policy path to gain unintended access to Vault paths. An attacker who can control t…

    HashiCorp Vault Enterprise Vault
  • Medium 4.7
    CVE-2026-14361 Public exploit

    Consul-template is vulnerable to path redirection in writeToFile through symlink attack

    The consul-template library before version 0.42.1 is vulnerable to a path redirection issue in the writeToFile template helper that may allow template output to be written outside the intended directory or to overwrite an existing file. This vulnerability (CV…

    HashiCorp Tooling
  • Medium 4.7
    CVE-2026-5061 Public exploit

    Consul-template vulnerable to sandbox path bypass in file helper via a symlink attack

    The consul-template library before version 0.42.0 is vulnerable to a sandbox path bypass in the file template helper that may allow reading an out-of-sandbox file. This vulnerability (CVE-2026-5061) is fixed in consul-template 0.42.0.

    HashiCorp Tooling
  • High 7.5
    CVE-2026-4660 Public exploit

    Go-getter may allow to arbitrary filesystem reads through git operations

    HashiCorp’s go-getter library up to v1.8.5 may allow arbitrary file reads on the file system during certain git operations through a maliciously crafted URL. This vulnerability, CVE-2026-4660, is fixed in go-getter v1.8.6. This vulnerability does not affect t…

    HashiCorp Tooling golang-github-hashicorp-go-getter golang-github-hashicorp-go-getter Debian Ubuntu Go
  • High 8.1
    CVE-2024-10005 Public exploit

    Consul L7 Intentions Vulnerable To URL Path Bypass

    A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that using URL paths in L7 traffic intentions could bypass HTTP request path-based access rules.

    HashiCorp Consul Consul Enterprise consul Debian Ubuntu Go