Security Advisory

CVE-2026-5807

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-04-17 03:22:13

Last updated 2026-07-15 00:41:55

Assigner HashiCorp

CVSS score 7.5

State PUBLISHED

Description

Vault is vulnerable to a denial-of-service condition where an unauthenticated attacker can repeatedly initiate or cancel root token generation or rekey operations, occupying the single in-progress operation slot. This prevents legitimate operators from completing these workflows. This vulnerability, CVE-2026-5807, is fixed in Vault Community Edition 2.0.0 and Vault Enterprise 2.0.0.

← Browse all CVEs View on cve.org ↗