Skip to content
OpenAdvisories

Product · HashiCorp

Vault

43 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.8
    CVE-2026-5006 Public exploit

    Vault Vulnerable to Privilege Escalation via Slash Injection in Templated Policy Paths

    A vulnerability was identified in HashiCorp Vault and Vault Enterprise (“Vault”) such that an authenticated attacker may manipulate an identity value referenced by a templated policy path to gain unintended access to Vault paths. An attacker who can control t…

    HashiCorp Vault Enterprise Vault