CVE-2026-14361mediumCWE-59

CVE-2026-14361: medium-severity vulnerability in HashiCorp Tooling

Consul-template is vulnerable to path redirection in writeToFile through symlink attack

Published

Follow this CVE+ Monitor Tooling

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

33Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendcvss 4.7epss 0.1%
from disclosure to weapon24 days
Published on NVDJul 8
1st PoC+24d
The consul-template library before version 0.42.1 is vulnerable to a path redirection issue in the writeToFile template helper that may allow template output to be written outside the intended directory or to overwrite an existing file. This vulnerability (CVE-2026-14361) is fixed in consul-template 0.42.1.
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected products
HashiCorp · Tooling
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — HashiCorp Tooling

In the same product, most dangerous first.

CVE-2026-4660HIGHGo-getter may allow to arbitrary filesystem reads through git operationsEPSS 0.6%CVE-2026-16326CRITICALconsul-mcp-server vulnerable to cross-tenant credential reuse in streamable-HTTP stateless modeEPSS 0.5%CVE-2025-13357HIGHVault Terraform Provider Applied Incorrect Defaults for LDAP Auth MethodEPSS 0.5%CVE-2026-8715CRITICALVault Secrets Operator vulnerable to arbitrary file read and credential exfiltration via AppRole secretIDPathEPSS 0.5%CVE-2026-16498CRITICALterraform-mcp-server vulnerable to cross-tenant credential reuse in streamable-HTTP stateless modeEPSS 0.5%CVE-2026-16328HIGHconsul-mcp-server vulnerable to server side request forgery leading to token exposureEPSS 0.4%