Read the docs

openbao

Records49All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high10CVSS 7.0–8.9

Exploited now

openbao records in CISA KEV

No openbao vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Openbao 25 records HIGH Aws Plugin 1 record LOW

Records

49 records

TI-2024-01904 CVE-2024-2048 · GHSA-r3w7-mfpm-c2vw

Vault Cert Auth Method Did Not Correctly Validate Non-CA Certificates

Priority HIGH 76

Vault and Vault Enterprise (“Vault”) TLS certificate auth method did not correctly validate client certificates when configured with a non-CA certificate as trusted certificate.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00451 Published 2024-03-04 Partial fix · 1.16.0, 1.15.5 +1 CWE-295
TI-2026-40259 CVE-2026-55770 · GHSA-6mwx-4547-5vc9

OpenBao: LDAPi ldaputil (wrong escape func)

Priority HIGH 65

OpenBao is an open source identity-based secrets management system.

CVSS 3.1MEDIUM 6.8 Network Low privileges No interaction EPSS 0.00525 Published 2026-09-15 Fixed in 2.5.5, 0.0.0-20260617104213-10b7825c714c CWE-90
TI-2025-34701 CVE-2025-54997 · GHSA-xp75-r577-cvhp

OpenBao: Privileged Operator May Execute Code on the Underlying Host

Priority MEDIUM 42

OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00431 Published 2025-08-09 Fixed in 2.3.2, 0.0.0-20250806194004-a14053c9679d CWE-94
TI-2024-07592 CVE-2024-8185 · GHSA-g233-2p4r-3q7v

Vault Vulnerable to Denial of Service When Processing Raft Join Requests

Priority LOW 39

Vault Community and Vault Enterprise (“Vault”) clusters using Vault’s Integrated Storage backend are vulnerable to a denial-of-service (DoS) attack through memory exhaustion through a Raft cluster join API endpoint .

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00476 Published 2024-10-31 Partial fix · 1.18.1, 2.0.3 CWE-636
TI-2025-32930 CVE-2025-52894 · GHSA-prpj-rchp-9j5h

OpenBao Vulnerable to Unauthenticated Rekey Operation Cancellation

Priority LOW 37

OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00396 Published 2025-06-25 Fixed in 2.3.0, 0.0.0-20250625150133-fe75468822a2 CWE-20
TI-2026-79452 CVE-2026-115365 · GHSA-w7x3-3wf8-3w6w

Incorrect authorization in OpenBao policy cache allows cross-namespace access

Priority LOW 35

OpenBao from 2.3.0 before 2.6.3 contains an incorrect authorization vulnerability in its ACL policy cache that allows tokens to reference policies from arbitrary namespaces using specially crafted policy names.

CVSS 4.0HIGH 7.5 Network High privileges No interaction EPSS 0.00304 Published 2026-10-22 Fixed in 2.6.3 CWE-863
TI-2025-34700 CVE-2025-54996 · GHSA-vf84-mxrq-crqc

OpenBao Root Namespace Operator May Elevate Token Privileges

Priority LOW 34

OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00353 Published 2025-08-09 Fixed in 2.3.2, 0.0.0-20250806193240-9b0b5d4f345f CWE-269
TI-2024-08520 CVE-2024-9180 · GHSA-rr8j-7w34-xp5j

Vault Operators in Root Namespace May Elevate Their Privileges

Priority LOW 34

A privileged Vault operator with write permissions to the root namespace’s identity endpoint could escalate their own or another user’s privileges to Vault’s root policy.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00525 Published 2024-10-10 Partial fix · 1.18.0, 2.0.3 CWE-266
TI-2026-79447 CVE-2026-115360 · GHSA-x22g-c4g9-m3q8

Open redirect in OpenBao OIDC identity provider UI

Priority LOW 30

OpenBao before 2.6.3 contains an open redirect vulnerability in the UI's OIDC identity provider that affects users not authenticated to OpenBao.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00248 Published 2026-10-22 Fixed in 2.6.3 CWE-601
TI-2025-34702 CVE-2025-54998 · GHSA-j3xv-7fxp-gfhx

OpenBao Userpass and LDAP User Lockout Bypass

Priority LOW 30

OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00233 Published 2025-08-09 Fixed in 2.3.2, 0.0.0-20250807212521-c52795c1ef74 CWE-307
TI-2025-03702 CVE-2025-4166 · GHSA-gcqf-f89c-68hv

Vault May Include Sensitive Data in Error Logs When Using the KV v2 Plugin

Priority LOW 29

Vault Community and Vault Enterprise Key/Value (kv) Version 2 plugin may unintentionally expose sensitive information in server and audit logs when users submit malformed payloads during secret creation or update operati…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00457 Published 2025-05-02 Partial fix · 1.19.2, 1.19.3 CWE-209
TI-2025-34705 CVE-2025-55001 · GHSA-2q8q-8fgw-9p6p

OpenBao LDAP MFA Enforcement Bypass When Using Username As Alias

Priority LOW 28

OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00244 Published 2025-08-09 Fixed in 2.3.2, 0.0.0-20250807212521-c52795c1ef74 CWE-156
Load more
Open these records in search →