Vulnerability Database - OSV

BIT-openbao-2026-71543

Bitnami/openbao

OpenBao's Templated Policies Allow Privilege Escalation via Wildcard Characters 14 hours ago

Fix available
Severity - 7.5 (High)

BIT-openbao-2026-55776

Bitnami/openbao

OpenBao: Transit secrets engine crashes on key creation with `derived: true` for asymmetric key types 4 days ago

Fix available
Severity - 6.5 (Medium)

BIT-openbao-2026-55775

Bitnami/openbao

OpenBao's System Backend allows Unauthorized Management of the containing Namespace 4 days ago

Fix available
Severity - 2.3 (Low)

BIT-openbao-2026-55774

Bitnami/openbao

OpenBao: Cross-namespace lease revocation/renewal via canonical sys/leases/{revoke,renew} — incomplete fix of CVE-2026-45808 4 days ago

Fix available
Severity - 2.1 (Low)

BIT-openbao-2026-55770

Bitnami/openbao

OpenBao: LDAPi ldaputil (wrong escape func) 4 days ago

Fix available
Severity - 6.8 (Medium)

MINI-2hh3-986p-vm33

MinimOS/openbao

See record for full details 5 days ago

Fix available

MINI-4c4w-88qx-q4wq

MinimOS/openbao-fips

See record for full details 5 days ago

Fix available

MINI-62jr-vhf6-98fp

MinimOS/openbao

See record for full details 5 days ago

Fix available

MINI-66fr-gff9-6pw3

MinimOS/openbao-fips

See record for full details 5 days ago

Fix available

MINI-p38v-hgfh-68c7

MinimOS/openbao-fips

See record for full details 5 days ago

Fix available

MINI-ph5j-7h9g-7h8h

MinimOS/openbao

See record for full details 5 days ago

Fix available

CVE-2026-63132

github.com/openbao/openbao

OpenBao's Recovery Mode Vulnerable To Token Leakage via Timing Attack 6 days ago

Fix available
Severity - 9.2 (Critical)

CVE-2026-63131

github.com/openbao/openbao

OpenBao LIST ACL bypass: a trailing-slash LIST request skips a more-specific deny rule (unported Vault v2.0.3 fix) 6 days ago

Fix available
Severity - 6.0 (Medium)

CVE-2026-77285

github.com/openbao/openbao

OpenBao Agent Writes Secrets to Stdout 6 days ago

Fix available
Severity - 2.4 (Low)

GHSA-xp3c-3jw3-4vcr

Go/github.com/openbao/openbao

OpenBao Skips Stricter Deny Policy for LIST operations 22 Sep

Fix available
Severity - 6.0 (Medium)

GHSA-34fc-gh42-pj53

Go/github.com/openbao/openbao

OpenBao's Recovery Mode Vulnerable To Token Leakage via Timing Attack 22 Sep

Fix available
Severity - 9.1 (Critical)