CVE-2026-5807 in Vaultthông tin

Tóm tắt

Bởi MITRE • 17/04/2026

Vault is vulnerable to a denial-of-service condition where an unauthenticated attacker can repeatedly initiate or cancel root token generation or rekey operations, occupying the single in-progress operation slot. This prevents legitimate operators from completing these workflows. This vulnerability, CVE-2026-5807, is fixed in Vault Community Edition 2.0.0 and Vault Enterprise 2.0.0.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

chịu trách nhiệm

HashiCorp

Đặt trước

08/04/2026

Tiết lộ

17/04/2026

Kiểm duyệt

được chấp nhận

EPSS

0.00718

KEV

không

Các hoạt động

rất thấp

Nguồn

Do you know our Splunk app?

Download it now for free!