Login Request a demo
OP
Vendor
openbao
3 products with CVEs on record
50
CVEs
0
On KEV
12
New 30D
Products
OP
openbao
openbao
9.8
48 CVEs0 on KEV12 new
AP
Aws Plugin
Openbao
8.1
1 CVEs0 on KEV0 new
OP
openbao-plugins
openbao
8.1
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-115369
New
OP
openbao
openbao
2.2
0%
Oct 22OpenBao 2.5.0 before 2.6.2 PKI allowed_ip_sans_cidr Bypass via CSR IP SANs
CVE-2026-115366
New
OP
openbao
openbao
2.6
0%
Oct 22OpenBao 2.3.0 before 2.6.3 Missing Root Namespace Enforcement in Plugin Catalog APIs
CVE-2026-115365
New
OP
openbao
openbao
6.6
0%
Oct 22OpenBao 2.3.0 before 2.6.3 Incorrect Authorization via Policy Cache Namespace Traversal
CVE-2026-115364
New
OP
openbao
openbao
2.2
0%
Oct 22OpenBao before 2.6.3 Missing Header Check on Agent/Proxy Quit Endpoints
CVE-2026-115363
New
OP
openbao
openbao
3.3
0%
Oct 22OpenBao 2.2.0 before 2.6.4 and 2.7.0 before 2.7.1 ACME EAB MAC Key Disclosure via Sanitized Configuration
CVE-2026-115362
New
OP
openbao
openbao
2.2
0%
Oct 22OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Expired AppRole SecretID Authentication Bypass
CVE-2026-115361
New
OP
openbao
openbao
4.1
0%
Oct 22OpenBao before 2.6.3 ACL Bypass via Dropped Templated Policy Denial
CVE-2026-115360
New
OP
openbao
openbao
4.7
0%
Oct 22OpenBao before 2.6.3 Open Redirect via OIDC Identity Provider UI
CVE-2026-115359
New
OP
openbao
openbao
3.7
0%
Oct 22OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Role-Based Rate Limit Quota Bypass via Request Parsing
CVE-2026-115358
New
OP
openbao
openbao
2.0
0%
Oct 22OpenBao before 2.6.3 Sensitive Data Leak in Audit Log via Malformed Parameters
CVE-2026-115357
New
OP
openbao
openbao
2.2
0%
Oct 22OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Improper Audit Logging of Root Generation and Rekey Responses
CVE-2026-115356
New
OP
openbao
openbao
5.4
0%
Oct 22OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Kubernetes Auth Method Token Renewal After Revocation
CVE-2026-63132
OP
openbao
openbao
9.2
1%
Sep 23OpenBao's Recovery Mode Vulnerable To Token Leakage via Timing Attack
CVE-2026-63131
OP
openbao
openbao
6.0
0%
Sep 23OpenBao LIST ACL bypass: a trailing-slash LIST request skips a more-specific deny rule (unported Vault v2.0.3 fix)
CVE-2026-77285
OP
openbao
openbao
2.4
0%
Sep 23OpenBao Agent Writes Secrets to Stdout
CVE-2026-71543
OP
openbao
openbao
7.5
0%
Sep 21OpenBao's Templated Policies Allow Privilege Escalation via Wildcard Characters
CVE-2026-55770
OP
openbao
openbao
6.8
1%
Sep 15OpenBao: LDAPi ldaputil (wrong escape func)
CVE-2026-55776
OP
openbao
openbao
6.5
1%
Sep 15OpenBao: Transit secrets engine crashes on key creation with `derived: true` for asymmetric key types
CVE-2026-55774
OP
openbao
openbao
2.1
1%
Sep 15OpenBao: Cross-namespace lease revocation/renewal via canonical sys/leases/{revoke,renew} — incomplete fix of CVE-2026-45808
CVE-2026-55775
OP
openbao
openbao
2.3
0%
Sep 15OpenBao's System Backend allows Unauthorized Management of the containing Namespace
CVE-2026-45808
OP
openbao
openbao
7.1
0%
Aug 7OpenBao's cross-namespace lease revocation via legacy sys/revoke path bypasses ACL
CVE-2026-46405
OP
openbao
openbao
5.3
1%
Aug 7OpenBao's Kerberos Auth Method Accumulates Unaccessible Tokens
CVE-2026-46358
OP
openbao
openbao
5.4
0%
Aug 7OpenBao's Inline Auth Incorrectly Redacted Headers
CVE-2026-42186
OP
openbao
openbao
7.5
0%
May 14OpenBao's Namespace Deletion May Not Delete Data Properly
CVE-2026-40264
OP
openbao
openbao
2.7
0%
Apr 21OpenBao's Token Store Allows Cross-Namespace Renewal, Revocation
CVE-2026-39396
OP
openbao
openbao
6.5
0%
Apr 21OpenBao has Decompression Bomb via Unbounded Copy in OCI Plugin Extraction (DoS)
CVE-2026-39388
OP
openbao
openbao
3.1
0%
Apr 21OpenBao's Certificate Authentication Allows Token Renewal With Different Certificate
CVE-2026-39946
OP
openbao
openbao
4.9
0%
Apr 21OpenBao allows SQL Injection in PostgreSQL database secrets engine
CVE-2026-33758
OP
openbao
openbao
6.1
0%
Mar 27OpenBao has Reflected XSS in its OIDC authentication error message
CVE-2026-33757
OP
openbao
openbao
8.3
0%
Mar 27OpenBao lacks user confirmation for OIDC direct callback mode
CVE-2025-64761
OP
openbao
openbao
7.2
0%
Nov 25OpenBao Privileged Operator Identity Group Root Escalation
CVE-2025-59048
OP
openbao-plugins
openbao
8.1
0%
Oct 23OpenBao AWS Plugin Vulnerable to Cross-Account IAM Role Impersonation in AWS Auth Method
CVE-2025-62705
OP
openbao
openbao
4.9
0%
Oct 22OpenBao and Vault Leak []byte Fields in Audit Logs
CVE-2025-62513
OP
openbao
openbao
7.5
0%
Oct 22OpenBao leaks HTTPRawBody in Audit Logs
CVE-2025-59043
OP
openbao
openbao
7.5
1%
Oct 17OpenBao vulnerable to denial of service via malicious JSON request processing
CVE-2025-55003
OP
openbao
openbao
5.7
0%
Aug 9OpenBao Login MFA Bypasses Rate Limiting and TOTP Token Reuse
CVE-2025-55001
OP
openbao
openbao
6.5
0%
Aug 9OpenBao LDAP MFA Enforcement Bypass When Using Username As Alias
CVE-2025-55000
OP
openbao
openbao
6.5
0%
Aug 9OpenBao TOTP Secrets Engine Enables Code Reuse
CVE-2025-54999
OP
openbao
openbao
3.7
0%
Aug 9OpenBao: Timing Side-Channel in Userpass Auth Method
CVE-2025-54998
OP
openbao
openbao
5.3
0%
Aug 9OpenBao Userpass and LDAP User Lockout Bypass
CVE-2025-54997
OP
openbao
openbao
9.1
0%
Aug 9OpenBao: Privileged Operator May Execute Code on the Underlying Host
CVE-2025-54996
OP
openbao
openbao
7.2
0%
Aug 9OpenBao Root Namespace Operator May Elevate Token Privileges
CVE-2025-52894
OP
Openbao
Openbao
7.5
0%
Jun 25OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys
CVE-2025-52893
OP
Openbao
Openbao
4.5
0%
Jun 25OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys
CVE-2025-4166
OP
Openbao
Openbao
6.5
0%
May 2Vault Community and Vault Enterprise Key/Value (kv) Version 2 plugin may unintentionally expose sensitive information in server and audit logs when users submit malformed payloads…
CVE-2024-8185
OP
Openbao
Openbao
7.5
0%
Oct 31Vault Community and Vault Enterprise (“Vault”) clusters using Vault’s Integrated Storage backend are vulnerable to a denial-of-service (DoS) attack through memory exhaustion…
CVE-2024-9180
OP
Openbao
Openbao
7.2
1%
Oct 10A privileged Vault operator with write permissions to the root namespace’s identity endpoint could escalate their own or another user’s privileges to Vault’s root policy
CVE-2024-7594
OP
Openbao
Openbao
8.8
0%
Sep 26Vault’s SSH secrets engine did not require the valid_principals list to contain a value by default
CVE-2024-2048
OP
Openbao
Openbao
9.8
0%
Mar 4Vault and Vault Enterprise (“Vault”) TLS certificate auth method did not correctly validate client certificates when configured with a non-CA certificate as trusted certificate