Skip to content
OpenAdvisories

Vendor

HashiCorp

139 known vulnerabilities.

Products

Vault Enterprise 49 Vault 43 Consul 27 Consul Enterprise 27 Nomad Enterprise 26 Nomad 24 Tooling 13 Shared library 10 Boundary 5 Boundary Enterprise 4 Terraform Enterprise 3 Vagrant 2 go-slug 1 Packer 1 Terraform 1 go-getter 1 Vagrant < 2.4.0 0 Vault < 1.11.3 0 Vault < 1.10.6 0 Vault < 1.9.9 0 Vault < 1.13.2 0 Vault < 1.13.1 0 Vault < 1.12.5 0 Vault < 1.11.9 0 Terraform Enterprise < v202306-1 0 Vault < 1.15.5 0 Terraform < 1.5.7 0 Vault < 1.13.0 0 Vault < 1.12.4 0 Vault < 1.11.8 0 Vault < 1.10.11 0 Vault < 1.14.0 0 Vault < 1.11.11 0 Vault < 1.12.7 0 Vault < 1.13.3 0 Vault < 1.14.3 0 Vault < 1.13.7 0 Vault < 1.7.6 0 Vault < 1.12.11 0 Vault < 1.8.5 0
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.8
    CVE-2026-5006 Public exploit

    Vault Vulnerable to Privilege Escalation via Slash Injection in Templated Policy Paths

    A vulnerability was identified in HashiCorp Vault and Vault Enterprise (“Vault”) such that an authenticated attacker may manipulate an identity value referenced by a templated policy path to gain unintended access to Vault paths. An attacker who can control t…

    HashiCorp Vault Enterprise Vault
  • Medium 4.7
    CVE-2026-14361 Public exploit

    Consul-template is vulnerable to path redirection in writeToFile through symlink attack

    The consul-template library before version 0.42.1 is vulnerable to a path redirection issue in the writeToFile template helper that may allow template output to be written outside the intended directory or to overwrite an existing file. This vulnerability (CV…

    HashiCorp Tooling
  • Medium 4.7
    CVE-2026-5061 Public exploit

    Consul-template vulnerable to sandbox path bypass in file helper via a symlink attack

    The consul-template library before version 0.42.0 is vulnerable to a sandbox path bypass in the file template helper that may allow reading an out-of-sandbox file. This vulnerability (CVE-2026-5061) is fixed in consul-template 0.42.0.

    HashiCorp Tooling