Browse CVEs

HIGH 7.5 CVE-2026-42186 OpenBao is an open source identity-based secrets management system. Prior to 2.5.3, when OpenBao's initial namespace deletion fails, subsequent retri… Openbao 2.5.3+ Fix from $1,9502026-05-14 MEDIUM 6.5 CVE-2026-39396 OpenBao is an open source identity-based secrets management system. Prior to version 2.5.3, `ExtractPluginFromImage()` in OpenBao's OCI plugin downlo… Openbao 2.5.3+ Fix from $1,6002026-04-21 HIGH 8.3 CVE-2026-33757 OpenBao is an open source identity-based secrets management system. Prior to version 2.5.2, OpenBao does not prompt for user confirmation when loggin… Openbao 2.5.2+ Fix from $1,9502026-03-27 MEDIUM 6.1 CVE-2026-33758 OpenBao is an open source identity-based secrets management system. Prior to version 2.5.2, OpenBao installations that have an OIDC/JWT authenticatio… Openbao 2.5.2+ Fix from $1,6002026-03-27 HIGH 7.2 CVE-2025-64761 OpenBao is an open source identity-based secrets management system. Prior to version 2.4.4, a privileged operator could use the identity group subsys… Openbao 2.4.4+ Fix from $1,9502025-11-25 HIGH 8.1 CVE-2025-59048 OpenBao's AWS Plugin generates AWS access credentials based on IAM policies. Prior to version 0.1.1, the AWS Plugin is vulnerable to cross-account IA… Aws Plugin 0.1.1+ Fix from $1,9502025-10-23 HIGH 7.5 CVE-2025-62513 OpenBao is an open source identity-based secrets management system. In versions 2.2.0 to 2.4.1, OpenBao's audit log experienced a regression wherein … Openbao 2.4.2+ Fix from $1,9502025-10-22 HIGH 7.5 CVE-2025-59043 OpenBao is an open source identity-based secrets management system. In OpenBao versions prior to 2.4.1, JSON objects after decoding may use significa… Openbao 2.4.1+ Fix from $1,9502025-10-17 MEDIUM 5.7 CVE-2025-55003 OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. In versions … Openbao 2.3.2+ Fix from $1,6002025-08-09 CRITICAL 9.1 CVE-2025-54997 OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. In versions … Openbao 2.3.2+ Fix from $2,3002025-08-09 MEDIUM 6.5 CVE-2025-55000 OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. In versions … Openbao 2.3.2+ Fix from $1,6002025-08-09 MEDIUM 6.5 CVE-2025-55001 OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. In versions … Openbao 2.3.2+ Fix from $1,6002025-08-09 MEDIUM 5.3 CVE-2025-54998 OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. In versions … Openbao 2.3.2+ Fix from $1,6002025-08-09 HIGH 7.2 CVE-2025-54996 OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. In versions … Openbao 2.3.2+ Fix from $1,9502025-08-09 HIGH 7.5 CVE-2025-52894 OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. OpenBao befo… Openbao 2.3.0+ Fix from $1,9502025-06-25 HIGH 7.2 CVE-2024-9180 A privileged Vault operator with write permissions to the root namespace’s identity endpoint could escalate their own or another user’s privileges to… Openbao 1.15.16 / 1.16.11+ Fix from $1,9502024-10-10