Skip to content
OpenAdvisories

Vendor

openbao

44 known vulnerabilities.

Products

openbao 43 openbao-plugins 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 7.5
    CVE-2026-71543

    OpenBao's Templated Policies Allow Privilege Escalation via Wildcard Characters

    OpenBao is an open source identity-based secrets management system. Prior to 2.6.0, templated ACL, PKI, and SSH policies could substitute attacker-controlled identity data without rejecting syntax-significant characters. In ACL templated policies, asterisks, …

    openbao openbao github.com/openbao/openbao Go
  • High 7.1
    CVE-2026-45808

    OpenBao's cross-namespace lease revocation via legacy sys/revoke path bypasses ACL

    OpenBao is an open source identity-based secrets management system. Prior to version 2.5.4, OpenBao's namespaces provide multi-tenant separation. A tenant who intentionally leaks lease identifiers can have their lease and underlying credential revoked or rene…

    openbao openbao github.com/openbao/openbao openbao Alpine Go
  • High 7.5
    CVE-2025-64761

    OpenBao Privileged Operator Identity Group Root Escalation

    OpenBao is an open source identity-based secrets management system. Prior to version 2.4.4, a privileged operator could use the identity group subsystem to add a root policy to a group identity group, escalating their or another user's permissions in the syst…

    openbao openbao github.com/openbao/openbao Go
  • High 8.1
    CVE-2025-59048

    OpenBao AWS Plugin Vulnerable to Cross-Account IAM Role Impersonation in AWS Auth Method

    OpenBao's AWS Plugin generates AWS access credentials based on IAM policies. Prior to version 0.1.1, the AWS Plugin is vulnerable to cross-account IAM role Impersonation in the AWS auth method. The vulnerability allows an IAM role from an untrusted AWS accoun…

    openbao openbao-plugins github.com/openbao/openbao-plugins Go
  • High 7.5
    CVE-2025-59043

    OpenBao vulnerable to denial of service via malicious JSON request processing

    OpenBao is an open source identity-based secrets management system. In OpenBao versions prior to 2.4.1, JSON objects after decoding may use significantly more memory than their serialized version. It is possible to craft a JSON payload to maximize the factor …

    openbao openbao github.com/openbao/openbao openbao Alpine Go
  • High 7.2
    CVE-2025-54996

    OpenBao Root Namespace Operator May Elevate Token Privileges

    OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. In versions 2.3.1 and below, accounts with access to highly-privileged identity entity systems in root namespaces were abl…

    openbao openbao github.com/openbao/openbao openbao Alpine Go