HashiCorp Security

HCSEC-2026-54 - Boundary vulnerable to server-side request forgery in Vault credential store

HCSEC-2026-53 - Nomad allocation data migration may allow host directory permission modification via symlink following

HCSEC-2026-52 - Nomad dispatch payload writes can escape the allocation directory through symlinks

HCSEC-2026-51 - Nomad vulnerable to cross-namespace information disclosure in multiple endpoints

HCSEC-2026-50 - Consul-k8s vulnerable to a cross-namespace authorization bypass in component ACL binding rules

HCSEC-2026-49 - Consul vulnerable to an authorization bypass in health check registration

HCSEC-2026-48 - Consul vulnerable to a denial of service in HTTP APIs

HCSEC-2026-47 - Consul vulnerable to an authorization bypass in service mesh registration

HCSEC-2026-46 - Consul vulnerable to an authorization bypass in the agent's service mesh leaf certificate API

HCSEC-2026-45 - Updates to HashiCorp subprocessors

HCSEC-2026-44 - Go-getter vulnerable to a path traversal in S3/GCS directory download handling

HCSEC-2026-43 - Vault Inconsistent ACL Policy Evaluation May Allow Bypass of Deny Restrictions

HCSEC-2026-42 - Vault Enterprise ACL Policy Cache Vulnerable to Cross-Namespace Policy Resolution

HCSEC-2026-41 - Vault Vulnerable to Arbitrary Code Execution via Plugin Catalog Entries Restored From Raft Snapshots

HCSEC-2026-40 - Vault PKI ACME Default Directory Policy May Issue Certificates With Unverified Identities

HCSEC-2026-39 - Go-getter vulnerable to a privilege escalation issue in its archive decompression handling

HCSEC-2026-38 - Consul-template vulnerable to an information disclosure issue in error handling

HCSEC-2026-37 - Consul vulnerable to an authorization bypass in the Connect service mesh

HCSEC-2026-36 - Consul vulnerable to an authorization bypass in the catalog deregistration path

HCSEC-2026-35 - Consul vulnerable to a denial of service in the native RPC listener

HCSEC-2026-34 - Consul vulnerable to an authorization bypass in the catalog node-write path

HCSEC-2026-33 - HashiCorp Linux Signing GPG Key Update (CA026560)

HCSEC-2026-32 - Vault Vulnerable to Privilege Escalation via Slash Injection in Templated Policy Paths

HCSEC-2026-31 - Go-slug vulnerable to exclusion bypass in .terraformignore handling

HCSEC-2026-30 - Updates to HashiCorp subprocessors

HCSEC-2026-29 - Packer vulnerable to arbitrary file write via crafted plugin archive during installation

HCSEC-2026-28 - Vault Secrets Operator vulnerable to arbitrary file read via AppRole secretIDPath

HCSEC-2026-27 - Vault Enterprise vulnerable to cross-namespace entity deletion

HCSEC-2026-26 - Vault vulnerable to LIST authorization bypass via trailing-slash strip

HCSEC-2026-25 - Multiple vulnerabilities impacting HashiCorp Consul

HCSEC-2026-24 - Multiple vulnerabilities impacting HashiCorp Consul MCP Server

HCSEC-2026-23 - Multiple vulnerabilities impacting HashiCorp Terraform MCP Server

HCSEC-2026-22 - Nomad vulnerable to cross-namespace host volume claim deletion

HCSEC-2026-21 - Nomad vulnerable to sandbox escape in Docker task driver

HCSEC-2026-20 - Consul-template vulnerable to path redirections in writeToFile

HCSEC-2026-19 - Nomad Docker driver vulnerable to host namespace bypass on Linux

HCSEC-2026-18 - Memberlist vulnerable to denial of service via gossip message

HCSEC-2026-17 - Terraform Enterprise vulnerable to arbitrary file read

HCSEC-2026-16 - Vault Audit Device Plugin Directory Guard Bypass via Legacy Path Option

HCSEC-2026-15 - Nomad vulnerable to path traversal in dynamic host volume which may lead to code execution

HCSEC-2026-14 - Nomad arbitrary file read/write on client host through symlink attack

HCSEC-2026-13 - Nomad's exec2 task driver vulnerable to arbitrary file read/write on client host through symlink attack

HCSEC-2026-12 - Consul-template vulnerable to sandbox path bypass in file helper through symlink attack

HCSEC-2026-11 - Boundary Workers Vulnerable to Denial of Service During TLS Handshake

HCSEC-2026-10 - Updates to HashiCorp subprocessors

HCSEC-2026-09 - Remediation and Improved Secret Management for GitHub Webhook Secret Exposure

HCSEC-2026-08 - Vault Vulnerable to Denial-of-Service via Unauthenticated Root Token Generation/Rekey Operations

HCSEC-2026-07 - Vault May Expose Tokens to Auth Plugins Due to Incorrect Header Sanitization

HCSEC-2026-06 - Vault Vulnerable to Server-Side Request Forgery in ACME Challenge Validation via Attacker-Controlled DNS

HCSEC-2026-05 - Vault KVv2 Metadata and Secret Deletion Policy Bypass Denial-of-Service

HCSEC-2026-04 - Go-getter may allow to arbitrary filesystem reads through git operations

HCSEC-2026-03 - HashiCorp GPG Key (72D7468F) Update

HCSEC-2026-02 - Consul Vulnerable to Arbitrary File Reads Through the Vault Kubernetes Authentication Provider

HCSEC-2026-01 - Arbitrary code execution in React server-side rendering of untrusted MDX content

HCSEC-2025-33 - Vault Terraform Provider Applied Incorrect Defaults for LDAP Auth Method

HCSEC-2025-34 - Terraform Enterprise state versions can be created by users without sufficient write access

HCSEC-2025-29 - Consul's KV endpoint is vulnerable to denial of service

HCSEC-2025-28 - Consul's event endpoint is vulnerable to denial of service

HCSEC-2025-32 - Incomplete Fix For Previous Vault DoS Issue

HCSEC-2025-31- Vault Vulnerable to Denial of Service Due to Rate Limit Regression

HCSEC-2025-30 - Vault AWS Auth Method Authentication Bypass Through Mishandling of Cache Entries

HCSEC-2025-25 - Updates to HashiCorp subprocessors

HCSEC-2025-24 - Vault Denial of Service Though Complex JSON Payloads

HCSEC-2025-23 - HashiCorp go-getter Vulnerable to Arbitrary Read through Symlink Attack