openbao records

26 published records for vendor openbao.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 100%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

26 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2024-2048No exploit	Vault Cert Auth Method Did Not Correctly Validate Non-CA Certificateshashicorp · vault · CWE-295 Pre-auth Auth bypass Weak crypto	Critical9.8	—	0.4%	Mar 4, 2024
37Monitor	CVE-2026-33758No exploit	OpenBao has Reflected XSS in its OIDC authentication error messageopenbao · openbao · CWE-20 Pre-auth XSS	Critical9.4	—	0.2%	Mar 27, 2026
36Monitor	CVE-2025-54997No exploit	OpenBao: Privileged Operator May Execute Code on the Underlying Hostopenbao · openbao · CWE-94 RCE	Critical9.1	—	0.4%	Aug 8, 2025
35Monitor	CVE-2024-7594No exploit	Vault SSH Secrets Engine Configuration Did Not Restrict Valid Principals By Defaulthashicorp · vault · CWE-732	High8.8	—	0.2%	Sep 26, 2024
33Monitor	CVE-2026-33757No exploit	OpenBao lacks user confirmation for OIDC direct callback modeopenbao · openbao · CWE-384 Pre-auth	High8.3	—	0.4%	Mar 27, 2026
32Monitor	CVE-2025-59048No exploit	OpenBao AWS Plugin Vulnerable to Cross-Account IAM Role Impersonation in AWS Auth Methodopenbao · aws plugin · CWE-694	High8.1	—	0.2%	Oct 23, 2025
30Monitor	CVE-2025-59043No exploit	OpenBao vulnerable to denial of service via malicious JSON request processingopenbao · openbao · CWE-400 Pre-auth Deserialization Denial of service	High7.5	—	0.6%	Oct 17, 2025
30Monitor	CVE-2024-8185No exploit	Vault Vulnerable to Denial of Service When Processing Raft Join Requestshashicorp · vault · CWE-636 Pre-auth Denial of service	High7.5	—	0.4%	Oct 31, 2024
30Monitor	CVE-2025-64761No exploit	OpenBao Privileged Operator Identity Group Root Escalationopenbao · openbao · CWE-266	High7.5	—	0.3%	Nov 25, 2025
28Monitor	CVE-2024-9180No exploit	Vault Operators in Root Namespace May Elevate Their Privilegesopenbao · openbao · CWE-266	High7.2	—	0.5%	Oct 10, 2024
28Monitor	CVE-2025-54996No exploit	OpenBao Root Namespace Operator May Elevate Token Privilegesopenbao · openbao · CWE-269	High7.2	—	0.3%	Aug 8, 2025
27Monitor	CVE-2025-52894No exploit	OpenBao Vulnerable to Unauthenticated Rekey Operation Cancellationopenbao · openbao · CWE-20 Pre-auth	Medium6.9	—	0.3%	Jun 25, 2025
26Monitor	CVE-2025-4166No exploit	Vault May Include Sensitive Data in Error Logs When Using the KV v2 Pluginhashicorp · vault · CWE-209 Pre-auth Info leak	Medium6.5	—	0.4%	May 2, 2025
26Monitor	CVE-2025-55001No exploit	OpenBao LDAP MFA Enforcement Bypass When Using Username As Aliasopenbao · openbao · CWE-156	Medium6.5	—	0.2%	Aug 8, 2025
26Monitor	CVE-2025-55000No exploit	OpenBao TOTP Secrets Engine Enables Code Reuseopenbao · openbao · CWE-156	Medium6.5	—	0.2%	Aug 8, 2025
26Monitor	CVE-2026-39396No exploit	OpenBao has Decompression Bomb via Unbounded Copy in OCI Plugin Extraction (DoS)openbao · openbao · CWE-400 Pre-auth Denial of service	Medium6.5	—	0.2%	Apr 20, 2026
22Monitor	CVE-2025-62705No exploit	OpenBao and Vault Leak []byte Fields in Audit Logsopenbao · openbao · CWE-532 Info leak	Medium5.7	—	0.3%	Oct 22, 2025
22Monitor	CVE-2025-62513No exploit	OpenBao leaks HTTPRawBody in Audit Logsopenbao · openbao · CWE-532 Info leak	Medium5.7	—	0.3%	Oct 22, 2025
22Monitor	CVE-2025-55003No exploit	OpenBao Login MFA Bypasses Rate Limiting and TOTP Token Reuseopenbao · openbao · CWE-307	Medium5.7	—	0.2%	Aug 8, 2025
21Monitor	CVE-2025-54998No exploit	OpenBao Userpass and LDAP User Lockout Bypassopenbao · openbao · CWE-307 Pre-auth	Medium5.3	—	0.2%	Aug 8, 2025
18Monitor	CVE-2025-52893No exploit	OpenBao May Leak Sensitive Information in Logs When Processing Malformed Dataopenbao · openbao · CWE-532 Info leak	Medium4.5	—	0.3%	Jun 25, 2025
18Monitor	CVE-2026-39946No exploit	OpenBao allows SQL Injection in PostgreSQL database secrets engineopenbao · openbao · CWE-89 SQL injection	Medium4.6	—	0.2%	Apr 20, 2026
14Monitor	CVE-2025-54999No exploit	OpenBao: Timing Side-Channel in Userpass Auth Methodopenbao · openbao · CWE-203 Pre-auth	Low3.7	—	0.2%	Aug 8, 2025
9Monitor	CVE-2026-42186No exploit	OpenBao's Namespace Deletion May Not Delete Data Properlyopenbao · openbao · CWE-212	Low2.3	—	0.2%	May 14, 2026
8Monitor	CVE-2026-40264No exploit	OpenBao's Token Store Allows Cross-Namespace Renewal, Revocationopenbao · openbao · CWE-1259	Low2.0	—	0.3%	Apr 20, 2026

CVE-2024-2048
39Monitor
Vault Cert Auth Method Did Not Correctly Validate Non-CA Certificates
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Weak crypto
hashicorp · vaultMar 4, 2024
CVE-2026-33758
37Monitor
OpenBao has Reflected XSS in its OIDC authentication error message
CriticalCVSS 9.4No exploitEPSS 0%
- Pre-auth
- XSS
openbao · openbaoMar 27, 2026
CVE-2025-54997
36Monitor
OpenBao: Privileged Operator May Execute Code on the Underlying Host
CriticalCVSS 9.1No exploitEPSS 0%
- RCE
openbao · openbaoAug 8, 2025
CVE-2024-7594
35Monitor
Vault SSH Secrets Engine Configuration Did Not Restrict Valid Principals By Default
HighCVSS 8.8No exploitEPSS 0%
hashicorp · vaultSep 26, 2024
CVE-2026-33757
33Monitor
OpenBao lacks user confirmation for OIDC direct callback mode
HighCVSS 8.3No exploitEPSS 0%
- Pre-auth
openbao · openbaoMar 27, 2026
CVE-2025-59048
32Monitor
OpenBao AWS Plugin Vulnerable to Cross-Account IAM Role Impersonation in AWS Auth Method
HighCVSS 8.1No exploitEPSS 0%
openbao · aws pluginOct 23, 2025
CVE-2025-59043
30Monitor
OpenBao vulnerable to denial of service via malicious JSON request processing
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Deserialization
- Denial of service
openbao · openbaoOct 17, 2025
CVE-2024-8185
30Monitor
Vault Vulnerable to Denial of Service When Processing Raft Join Requests
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
hashicorp · vaultOct 31, 2024
CVE-2025-64761
30Monitor
OpenBao Privileged Operator Identity Group Root Escalation
HighCVSS 7.5No exploitEPSS 0%
openbao · openbaoNov 25, 2025
CVE-2024-9180
28Monitor
Vault Operators in Root Namespace May Elevate Their Privileges
HighCVSS 7.2No exploitEPSS 0%
openbao · openbaoOct 10, 2024
CVE-2025-54996
28Monitor
OpenBao Root Namespace Operator May Elevate Token Privileges
HighCVSS 7.2No exploitEPSS 0%
openbao · openbaoAug 8, 2025
CVE-2025-52894
27Monitor
OpenBao Vulnerable to Unauthenticated Rekey Operation Cancellation
MediumCVSS 6.9No exploitEPSS 0%
- Pre-auth
openbao · openbaoJun 25, 2025
CVE-2025-4166
26Monitor
Vault May Include Sensitive Data in Error Logs When Using the KV v2 Plugin
MediumCVSS 6.5No exploitEPSS 0%
- Pre-auth
- Info leak
hashicorp · vaultMay 2, 2025
CVE-2025-55001
26Monitor
OpenBao LDAP MFA Enforcement Bypass When Using Username As Alias
MediumCVSS 6.5No exploitEPSS 0%
openbao · openbaoAug 8, 2025
CVE-2025-55000
26Monitor
OpenBao TOTP Secrets Engine Enables Code Reuse
MediumCVSS 6.5No exploitEPSS 0%
openbao · openbaoAug 8, 2025
CVE-2026-39396
26Monitor
OpenBao has Decompression Bomb via Unbounded Copy in OCI Plugin Extraction (DoS)
MediumCVSS 6.5No exploitEPSS 0%
- Pre-auth
- Denial of service
openbao · openbaoApr 20, 2026
CVE-2025-62705
22Monitor
OpenBao and Vault Leak []byte Fields in Audit Logs
MediumCVSS 5.7No exploitEPSS 0%
- Info leak
openbao · openbaoOct 22, 2025
CVE-2025-62513
22Monitor
OpenBao leaks HTTPRawBody in Audit Logs
MediumCVSS 5.7No exploitEPSS 0%
- Info leak
openbao · openbaoOct 22, 2025
CVE-2025-55003
22Monitor
OpenBao Login MFA Bypasses Rate Limiting and TOTP Token Reuse
MediumCVSS 5.7No exploitEPSS 0%
openbao · openbaoAug 8, 2025
CVE-2025-54998
21Monitor
OpenBao Userpass and LDAP User Lockout Bypass
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
openbao · openbaoAug 8, 2025
CVE-2025-52893
18Monitor
OpenBao May Leak Sensitive Information in Logs When Processing Malformed Data
MediumCVSS 4.5No exploitEPSS 0%
- Info leak
openbao · openbaoJun 25, 2025
CVE-2026-39946
18Monitor
OpenBao allows SQL Injection in PostgreSQL database secrets engine
MediumCVSS 4.6No exploitEPSS 0%
- SQL injection
openbao · openbaoApr 20, 2026
CVE-2025-54999
14Monitor
OpenBao: Timing Side-Channel in Userpass Auth Method
LowCVSS 3.7No exploitEPSS 0%
- Pre-auth
openbao · openbaoAug 8, 2025
CVE-2026-42186
9Monitor
OpenBao's Namespace Deletion May Not Delete Data Properly
LowCVSS 2.3No exploitEPSS 0%
openbao · openbaoMay 14, 2026
CVE-2026-40264
8Monitor
OpenBao's Token Store Allows Cross-Namespace Renewal, Revocation
LowCVSS 2.0No exploitEPSS 0%
openbao · openbaoApr 20, 2026