Vulnerability index

Browse CVEs

16 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Openbao HIGH 7.5
CVE-2026-42186

OpenBao is an open source identity-based secrets management system. Prior to 2.5.3, when OpenBao's initial namespace deletion fails, subsequent retri…

Fix: 2.5.3+
Fix from $1,950 2026-05-14
Openbao MEDIUM 6.5
CVE-2026-39396

OpenBao is an open source identity-based secrets management system. Prior to version 2.5.3, `ExtractPluginFromImage()` in OpenBao's OCI plugin downlo…

Fix: 2.5.3+
Fix from $1,600 2026-04-21
Openbao HIGH 8.3
CVE-2026-33757

OpenBao is an open source identity-based secrets management system. Prior to version 2.5.2, OpenBao does not prompt for user confirmation when loggin…

Fix: 2.5.2+
Fix from $1,950 2026-03-27
Openbao MEDIUM 6.1
CVE-2026-33758

OpenBao is an open source identity-based secrets management system. Prior to version 2.5.2, OpenBao installations that have an OIDC/JWT authenticatio…

Fix: 2.5.2+
Fix from $1,600 2026-03-27
Openbao HIGH 7.2
CVE-2025-64761

OpenBao is an open source identity-based secrets management system. Prior to version 2.4.4, a privileged operator could use the identity group subsys…

Fix: 2.4.4+
Fix from $1,950 2025-11-25
Aws Plugin HIGH 8.1
CVE-2025-59048

OpenBao's AWS Plugin generates AWS access credentials based on IAM policies. Prior to version 0.1.1, the AWS Plugin is vulnerable to cross-account IA…

Fix: 0.1.1+
Fix from $1,950 2025-10-23
Openbao HIGH 7.5
CVE-2025-62513

OpenBao is an open source identity-based secrets management system. In versions 2.2.0 to 2.4.1, OpenBao's audit log experienced a regression wherein …

Fix: 2.4.2+
Fix from $1,950 2025-10-22
Openbao HIGH 7.5
CVE-2025-59043

OpenBao is an open source identity-based secrets management system. In OpenBao versions prior to 2.4.1, JSON objects after decoding may use significa…

Fix: 2.4.1+
Fix from $1,950 2025-10-17
Openbao MEDIUM 5.7
CVE-2025-55003

OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. In versions …

Fix: 2.3.2+
Fix from $1,600 2025-08-09
Openbao CRITICAL 9.1
CVE-2025-54997

OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. In versions …

Fix: 2.3.2+
Fix from $2,300 2025-08-09
Openbao MEDIUM 6.5
CVE-2025-55000

OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. In versions …

Fix: 2.3.2+
Fix from $1,600 2025-08-09
Openbao MEDIUM 6.5
CVE-2025-55001

OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. In versions …

Fix: 2.3.2+
Fix from $1,600 2025-08-09
Openbao MEDIUM 5.3
CVE-2025-54998

OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. In versions …

Fix: 2.3.2+
Fix from $1,600 2025-08-09
Openbao HIGH 7.2
CVE-2025-54996

OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. In versions …

Fix: 2.3.2+
Fix from $1,950 2025-08-09
Openbao HIGH 7.5
CVE-2025-52894

OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. OpenBao befo…

Fix: 2.3.0+
Fix from $1,950 2025-06-25
Openbao HIGH 7.2
CVE-2024-9180

A privileged Vault operator with write permissions to the root namespace’s identity endpoint could escalate their own or another user’s privileges to…

Fix: 1.15.16 / 1.16.11+
Fix from $1,950 2024-10-10