CVE-2026-105818

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-105818
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-105818.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-105818
Aliases
Published
2026-10-07T21:21:05Z
Modified
2026-10-16T09:56:09Z
Severity
  • 5.9 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N CVSS Calculator
Summary
Vault PKI ACME Issues Certificate With Unvalidated SANs
Details

Vault's PKI secrets engine ACME server did not restrict certificate identities that ACME challenges do not validate when issuing certificates under the default directory policy. This may allow an ACME client to obtain a certificate containing unverified identity claims, potentially enabling impersonation toward systems that trust certificates issued by the affected Vault PKI mount. This vulnerability (CVE-2026-105818) is fixed in Vault Community Edition 2.1.2, and Vault Enterprise 2.1.2, 1.21.12, 1.20.17, and 1.19.23.

Database specific 
{
    "cna_assigner":  "HashiCorp",
    "cwe_ids":  [
        "CWE-345"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/105xxx/CVE-2026-105818.json",
    "unresolved_ranges":  [
        {
            "extracted_events":  [
                {
                    "introduced":  "1.14.0"
                },
                {
                    "fixed":  "1.21.12"
                }
            ],
            "source":  "AFFECTED_FIELD"
        }
    ]
}
References

Affected packages

Git / github.com/hashicorp/vault

Affected ranges

Type
GIT
Repo
https://github.com/hashicorp/vault
Events
Introduced
13a649f860186dffe3f3a4459814d87191efc321
Fixed
76fdd6587523c4c6cb079635075e019714d23470
Database specific
Show details 
{
    "extracted_events":  [
        {
            "introduced":  "1.14.0"
        },
        {
            "fixed":  "2.1.2"
        }
    ],
    "source":  "AFFECTED_FIELD"
}

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-105818.json"