Skip to content
OpenAdvisories

Product · HashiCorp

Tooling

13 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.7
    CVE-2026-14361 Public exploit

    Consul-template is vulnerable to path redirection in writeToFile through symlink attack

    The consul-template library before version 0.42.1 is vulnerable to a path redirection issue in the writeToFile template helper that may allow template output to be written outside the intended directory or to overwrite an existing file. This vulnerability (CV…

    HashiCorp Tooling
  • Medium 4.7
    CVE-2026-5061 Public exploit

    Consul-template vulnerable to sandbox path bypass in file helper via a symlink attack

    The consul-template library before version 0.42.0 is vulnerable to a sandbox path bypass in the file template helper that may allow reading an out-of-sandbox file. This vulnerability (CVE-2026-5061) is fixed in consul-template 0.42.0.

    HashiCorp Tooling