OP
Product
openbao
48
CVEs
0
On KEV
9.8
Max CVSS
12
New 30D
Severity mix
Critical 3High 12Medium 19Low 14
Watch
Add openbao to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-2048 | 9.8 | Mar 4 | Vault and Vault Enterprise (“Vault”) TLS certificate auth method did not correctly validate client certificates when configured with a non-CA certificate as trusted certificate Affected: before 2.0.0 |
| CVE-2026-63132 | 9.2 | Sep 23 | OpenBao's Recovery Mode Vulnerable To Token Leakage via Timing Attack Affected: < 2.6.0 |
| CVE-2025-54997 | 9.1 | Aug 9 | OpenBao: Privileged Operator May Execute Code on the Underlying Host Affected: < 2.3.2 |
Showing 3