Em resumo
- CVE-2026-5807 é uma vulnerabilidade ALTO (CVSS 7.5) que afeta github.com/hashicorp/vault, vault (hashicorp).
- Chance de exploração nos próximos 30 dias (EPSS): 0.72%, maior que 53.9% das vulnerabilidades.
- Correção: atualize para 2.0.0 ou posterior.
Description
Vault is vulnerable to a denial-of-service condition where an unauthenticated attacker can repeatedly initiate or cancel root token generation or rekey operations, occupying the single in-progress operation slot. This prevents legitimate operators from completing these workflows. This vulnerability, CVE-2026-5807, is fixed in Vault Community Edition 2.0.0 and Vault Enterprise 2.0.0.
NVD description
Vault is vulnerable to a denial-of-service condition where an unauthenticated attacker can repeatedly initiate or cancel root token generation or rekey operations, occupying the single in-progress operation slot. This prevents legitimate operators from completing these workflows. This vulnerability, CVE-2026-5807, is fixed in Vault Community Edition 2.0.0 and Vault Enterprise 2.0.0.
Mais vulnerabilidades de github.com/hashicorp/vault
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free