All vulnerabilities

Servers and applications

CVE-2026-115357

OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Improper Audit Logging of Root Generation and Rekey Responses

Severity
Low 2.1
Published
22 Oct 2026
Last changed
22 Oct 2026
Added to UpHeron
3 Nov 2026
Fixed in
2.6.4, 2.7.1
Sources
CVE Program

Affected software

SoftwareAffected versions
OpenBaoServers and applications · cna:openbao|openbao
  • Every version before 2.6.4
  • From 2.7.0 before 2.7.1

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-115357