https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T07:49:26.740848+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-08723 bdu:2026-08723 2026-10-03T07:49:26.804081+00:00 bdu:2026-08723 https://cve.radiocsirt.org/vuln/bit-openbao-2026-40264 BIT-openbao-2026-40264 — OpenBao's Token Store Allows Cross-Namespace Renewal, Revocation 2026-10-03T07:49:26.804115+00:00

Affected: Bitnami: openbao

OpenBao is an open source identity-based secrets management system. OpenBao's namespaces provide multi-tenant separation. Prior to version 2.5.3, a tenant who leaks token accessors can have their token revoked or renewed by a privileged administrator in another tenant. This is addressed in v2.5.3.

 https://cve.radiocsirt.org/vuln/euvd-2026-292270 EUVD-2026-292270 2026-10-03T07:49:26.804149+00:00 EUVD-2026-292270 https://cve.radiocsirt.org/vuln/fkie_cve-2026-40264 fkie_cve-2026-40264 2026-10-03T07:49:26.804163+00:00

OpenBao is an open source identity-based secrets management system. OpenBao's namespaces provide multi-tenant separation. Prior to version 2.5.3, a tenant who leaks token accessors can have their token revoked or renewed by a privileged administrator in another tenant. This is addressed in v2.5.3.

 https://cve.radiocsirt.org/vuln/ghsa-p49j-v9wc-wg57 GHSA-p49j-v9wc-wg57 — OpenBao's Token Store Allows Cross-Namespace Renewal, Revocation 2026-10-03T07:49:26.804185+00:00

Affected: Go: github.com/openbao/openbao

### Impact

OpenBao's namespaces provide multi-tenant separation. A tenant who leaks token accessors can have their token revoked or renewed by a privileged administrator in another tenant.

### Patches

This was addressed in v2.5.3.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10594-1 openSUSE-SU-2026:10594-1 — openbao-2.5.3-1.1 on GA media 2026-10-03T07:49:26.804208+00:00

openbao-2.5.3-1.1 on GA media

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1189 WID-SEC-W-2026-1189 — OpenBao: Mehrere Schwachstellen 2026-10-03T07:49:26.804226+00:00

Ein Angreifer kann mehrere Schwachstellen in OpenBao ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, und um einen SQL-Injection Angriff durchzuführen.