Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication

Description

References

• nvd.nist.gov/vuln/detail/CVE-2026-2808 · ADVISORY
• discuss.hashicorp.com/t/hcsec-2026-02-consul-vulnerable-to-arbitrary-file-reads-through-the-vault-kubernetes-authentication-provider/77232 · WEB
• hashicorp/consul · PACKAGE
• pkg.go.dev/vuln/GO-2026-4690 · WEB
• GitHub Advisory GHSA-cpfq-66p2-336j · ADVISORY

github.com/hashicorp/consul의 다른 취약점

• CVE-2025-11375보통 6.5Consul and Consul Enterprise’s (“Consul”) event endpoint is vulnerable to denial of service (DoS) due to lack of maximum value on the Conten…
• CVE-2025-11374보통 6.5Consul and Consul Enterprise’s (“Consul”) key/value endpoint is vulnerable to denial of service (DoS) due to incorrect Content Length header…
• CVE-2024-10086보통 6.1A vulnerability was identified in Consul and Consul Enterprise such that the server response did not explicitly set a Content-Type HTTP head…
• CVE-2024-10006보통 5.8A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that using Headers in L7 traffic intentions could bypass HTTP…
• CVE-2024-10005보통 5.8A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that using URL paths in L7 traffic intentions could bypass HT…