Vault SSH Secrets Engine Configuration Did Not Restrict Valid Principals By Default

OpenBao lacks user confirmation for OIDC direct callback mode

OpenBao's Templated Policies Allow Privilege Escalation via Wildcard Characters

OpenBao's Namespace Deletion May Not Delete Data Properly

OpenBao leaks HTTPRawBody in Audit Logs

OpenBao vulnerable to denial of service via malicious JSON request processing

OpenBao Vulnerable to Unauthenticated Rekey Operation Cancellation

Vault Vulnerable to Denial of Service When Processing Raft Join Requests

OpenBao Privileged Operator Identity Group Root Escalation

OpenBao Root Namespace Operator May Elevate Token Privileges

Vault Operators in Root Namespace May Elevate Their Privileges

OpenBao's cross-namespace lease revocation via legacy sys/revoke path bypasses ACL