CVE-2026-5807 in Vaultinformación

Resumen

por MITRE • 2026-04-17

Vault is vulnerable to a denial-of-service condition where an unauthenticated attacker can repeatedly initiate or cancel root token generation or rekey operations, occupying the single in-progress operation slot. This prevents legitimate operators from completing these workflows. This vulnerability, CVE-2026-5807, is fixed in Vault Community Edition 2.0.0 and Vault Enterprise 2.0.0.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsable

HashiCorp

Reservar

2026-04-08

Divulgación

2026-04-17

Moderación

aceptado

Artículo

VDB-358003

CPE

listo

EPSS

0.00718

KEV

no

Actividades

muy bajo

Fuentes

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-5807
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-5807
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-5807/

◂ AnteriorVisión De ConjuntoPróximo ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!