TO
Product
Tooling
by HashiCorp · last CVE Oct 26, 2026
11
CVEs
0
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 4High 5Medium 2Low 0
Watch

Add Tooling to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-16326
10.0
1%
Jul 29
consul-mcp-server vulnerable to cross-tenant credential reuse in streamable-HTTP stateless mode
Affected: 0.1.0 before 0.1.4
CVE-2026-16498
10.0
0%
Jul 28
terraform-mcp-server vulnerable to cross-tenant credential reuse in streamable-HTTP stateless mode
Affected: 0.3.0 before 1.1.0
CVE-2026-110720
New
9.9
0%
Oct 26
Consul-k8s vulnerable to a cross-namespace authorization bypass in component ACL binding rules
Affected: 0.42.0 before 2.0.4
CVE-2026-8715
9.6
0%
Aug 13
Vault Secrets Operator vulnerable to arbitrary file read and credential exfiltration via AppRole secretIDPath
Affected: 1.3.0 before 1.5.0
CVE-2026-16496
8.9
0%
Jul 28
terraform-mcp-server vulnerable to cross-user credential inheritance if an MCP session ID is obtained by another user
Affected: 0.3.0 before 1.1.0
CVE-2026-16328
8.6
0%
Jul 29
consul-mcp-server vulnerable to server side request forgery leading to token exposure
Affected: 0.1.0 before 0.1.4
CVE-2026-14869
8.6
0%
Jul 28
terraform-mcp-server vulnerable to server side request forgery leading to token exposure
Affected: 0.3.0 before 1.1.0
CVE-2026-87993
7.7
0%
Sep 10
Consul-template vulnerable to an information disclosure issue in error handling
Affected: 0.27.2 before 0.43.0
CVE-2026-4660
7.5
1%
Apr 9
Go-getter may allow to arbitrary filesystem reads through git operations
Affected: before 1.8.6
CVE-2026-14361
4.7
0%
Jul 8
Consul-template is vulnerable to path redirection in writeToFile through symlink attack
Affected: 0.1.0 before 0.42.1
CVE-2026-5061
4.7
0%
May 12
Consul-template vulnerable to sandbox path bypass in file helper via a symlink attack
Affected: 0.1.0 before 0.42.0
Showing 11