Beveiligingsadvies

CVE-2026-5807

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-04-17 03:22:13
Laatst bijgewerkt 2026-07-15 00:41:55
Toegewezen door HashiCorp
CVSS-score 7.5
Status PUBLISHED

Beschrijving

Vault is vulnerable to a denial-of-service condition where an unauthenticated attacker can repeatedly initiate or cancel root token generation or rekey operations, occupying the single in-progress operation slot. This prevents legitimate operators from completing these workflows. This vulnerability, CVE-2026-5807, is fixed in Vault Community Edition 2.0.0 and Vault Enterprise 2.0.0.