Vulnerabilities in HashiCorp

125 results
Vexday analysis

Com 93 CVEs catalogadas e nenhuma registrada no CISA KEV, o perfil de risco ativo da HashiCorp situa-se abaixo da média geral do catálogo, indicando ausência de exploração confirmada em campo até o momento. As 3 vulnerabilidades de severidade crítica e as 10 surgidas nos últimos 90 dias merecem acompanhamento próximo, especialmente CVE-2026-7474, que concentra o maior escore EPSS observado no portfólio (0,0689) e representa o vetor de maior probabilidade de exploração a curto prazo. A falha mais recorrente por tipo é CWE-266 (controle incorreto de privilégios), o que sugere atenção às configurações de permissão e ao modelo de confiança em ambientes que utilizam ferramentas HashiCorp para gestão de credenciais e infraestrutura. A ausência de PoCs públicas conhecidas reduz a superfície de ataque imediata, mas não elimina a necessidade de aplicar correções com regularidade, dado o ritmo recente de novas descobertas.

CVE-2026-5052MEDIUMVault Vulnerable to Server-Side Request Forgery in ACME Challenge Validation via Attacker-Controlled DNSEPSS 0.4%CVE-2026-5051MEDIUMAudit Log Plugin Directory Guard Bypass via Legacy path OptionEPSS 0.4%CVE-2023-0620MEDIUMVault Vulnerable to SQL Injection When Configuring the Microsoft SQL Database Storage BackendEPSS 0.4%CVE-2026-87993HIGHConsul-template vulnerable to an information disclosure issue in error handlingEPSS 0.4%CVE-2026-87090HIGHConsul vulnerable to an authorization bypass in the catalog node-write pathEPSS 0.4%CVE-2026-19014MEDIUMUncontrolled resource consumption in the Consul Connect authorization endpointEPSS 0.4%CVE-2024-6104MEDIUMgo-retryablehttp can leak basic auth credentials to log filesEPSS 0.4%CVE-2026-16496HIGHterraform-mcp-server vulnerable to cross-user credential inheritance if an MCP session ID is obtained by another userEPSS 0.4%CVE-2025-1293HIGHHashiCorp Hermes Improperly Validates AWS ALB JWTs, which May Lead to Authentication BypassEPSS 0.3%CVE-2024-5798LOWVault Incorrectly Validated JSON Web Tokens (JWT) Audience ClaimsEPSS 0.3%CVE-2026-7776HIGHBoundary Workers Vulnerable to Denial of Service During TLS HandshakeEPSS 0.3%CVE-2026-14373HIGHNomad Docker driver Linux host namespace bypassEPSS 0.3%CVE-2025-6011LOWTiming Side-Channel in Vault’s Userpass Auth MethodEPSS 0.3%CVE-2024-7625MEDIUMNomad Vulnerable to Allocation Directory Escape On Non-Existing File Paths Through Archive UnpackingEPSS 0.3%CVE-2026-88021HIGHConsul vulnerable to an authorization bypass in the Connect service meshEPSS 0.3%CVE-2023-0665MEDIUMVault PKI Issuer Endpoint Did Not Correctly Authorize Access to Issuer MetadataEPSS 0.3%CVE-2025-6015MEDIUMVault Login MFA Bypass of Rate Limiting and TOTP Code ReuseEPSS 0.3%CVE-2026-14886HIGHVault Enterprise vulnerable to cross-namespace entity deletionEPSS 0.3%CVE-2026-19012MEDIUMAuthenticated denial of service in Consul Enterprise-to-Community Edition downgrade pathEPSS 0.3%CVE-2026-87107MEDIUMConsul vulnerable to an authorization bypass in the catalog deregistration pathEPSS 0.3%