| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/openbao/openbao | < 0.0.0-20260420162526-f58111d2ca54 | 0.0.0-20260420162526-f58111d2ca54 |
| openbao | < 2.5.3 | 2.5.3 |
OpenBao's namespaces provide multi-tenant separation. A tenant who leaks token accessors can have their token revoked or renewed by a privileged administrator in another tenant.
This was addressed in v2.5.3.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free