Vulnerability GO-2026-6579
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
6 hours ago
October 01, 2026 at 08:23 PM UTC
OpenBao Skips Stricter Deny Policy for LIST operations in github.com/openbao/openbao
<0.0.0-20260713133043-f58d848c139e
<0.0.0-20260713133043-f58d848c139e
Summary
OpenBao Skips Stricter Deny Policy for LIST operations in github.com/openbao/openbao
Details
OpenBao Skips Stricter Deny Policy for LIST operations in github.com/openbao/openbao
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
6 hours ago
OpenBao's Recovery Mode Vulnerable To Token Leakage via Timing Attack in github.com/openbao/openbao
<0.0.0-20260713141742-763625a20721 GO-2026-6553
<0.0.0-20260713141742-763625a20721 GO-2026-6553
Unknown
6 hours ago
OpenBao Agent Writes Secrets to Stdout in github.com/openbao/openbao
<0.0.0-20260714163218-90272575e5f5 GO-2026-6554
<0.0.0-20260714163218-90272575e5f5 GO-2026-6554
Unknown
6 hours ago
OpenBao's Templated Policies Allow Privilege Escalation via Wildcard Characters in github.com/openbao/openbao
<0.0.0-20260710001938-2d4ebafec5c5 GO-2026-6556
<0.0.0-20260710001938-2d4ebafec5c5 GO-2026-6556
Medium Risk
9 days ago
OpenBao Skips Stricter Deny Policy for LIST operations
v0.1.0 - v1.1.5 GHSA-xp3c-3jw3-4vcr
v0.1.0 - v1.1.5 GHSA-xp3c-3jw3-4vcr
Critical
9 days ago
OpenBao's Recovery Mode Vulnerable To Token Leakage via Timing Attack
v0.1.0 - v1.1.5 GHSA-34fc-gh42-pj53
v0.1.0 - v1.1.5 GHSA-34fc-gh42-pj53
Impacted packages
Timeline
Published
6 hours ago
October 01, 2026 at 08:23 PM UTC
Last Modified
6 hours ago
October 01, 2026 at 08:55 PM UTC