CVE record · 1 source
CVE-2026-105820
CVSS 5.4Vault's ACL policy cache allowed namespace traversal when policy names contained path traversal constructs.
- Vendor
- HashiCorp
- Product
- Vault / Terraform / Consul / Nomad
- CVSS
- 5.4
- Exposure class
- Developer platform
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Vault's ACL policy cache allowed namespace traversal when policy names contained path traversal constructs.
Vault's ACL policy cache allowed namespace traversal when policy names contained path traversal constructs. This may allow a token assigned specially crafted policy names to use the capabilities of policies defined in other…