openbao

Records49All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical5CVSS 9.0–10.0

CVSS high10CVSS 7.0–8.9

Exploited now

openbao records in CISA KEV

No openbao vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Aws Plugin · all components

TI-2025-36690 CVE-2025-59048 · GHSA-jp7h-4f3c-9rc7

LOW 35

OpenBao's AWS Plugin generates AWS access credentials based on IAM policies.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00266 Published 2025-10-23 Fixed in 0.1.1 CWE-694