CVE record · 1 source
CVE-2026-89322
CVSS 7.2Vault and Vault Enterprise did not consistently evaluate ACL policies against the canonical form of resource and policy names.
- Vendor
- Canonical
- Product
- canonical
- CVSS
- 7.2
- EPSS
- 0.003 (p22)
- Exposure class
- Developer platform
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Vault and Vault Enterprise did not consistently evaluate ACL policies against the canonical form of resource and policy names.
Vault and Vault Enterprise did not consistently evaluate ACL policies against the canonical form of resource and policy names. This may allow an authenticated user with delegated permissions to bypass an explicit deny restriction…