← All credits

This issue was reported to HashiCorp by Han Sang-Kyung (HAN-BAMBO) and by additional internal and external parties.

1 vulnerability record and advisories credit this contributor.

CVE-2026-89322
Vault ACL Policy Evaluation May Allow Bypass of Deny Restrictions