https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T05:10:51.066537+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-vault-2021-42135 BIT-vault-2021-42135 2026-10-18T05:10:51.069766+00:00

Affected: Bitnami: vault

HashiCorp Vault and Vault Enterprise 1.8.x through 1.8.4 may have an unexpected interaction between glob-related policies and the Google Cloud secrets engine. Users may, in some situations, have more privileges than intended, e.g., a user with read permission for the /gcp/roleset/* path may be able to issue Google Cloud service account credentials.

 https://cve.radiocsirt.org/vuln/euvd-2026-32089 EUVD-2026-32089 2026-10-18T05:10:51.069837+00:00 EUVD-2026-32089 https://cve.radiocsirt.org/vuln/fkie_cve-2021-42135 fkie_cve-2021-42135 2026-10-18T05:10:51.069856+00:00

HashiCorp Vault and Vault Enterprise 1.8.x through 1.8.4 may have an unexpected interaction between glob-related policies and the Google Cloud secrets engine. Users may, in some situations, have more privileges than intended, e.g., a user with read permission for the /gcp/roleset/* path may be able to issue Google Cloud service account credentials.

 https://cve.radiocsirt.org/vuln/ghsa-362v-wg5p-64w2 GHSA-362v-wg5p-64w2 — Incorrect Privilege Assignment in HashiCorp Vault 2026-10-18T05:10:51.069880+00:00

Affected: Go: github.com/hashicorp/vault

HashiCorp Vault and Vault Enterprise 1.8.x through 1.8.4 may have an unexpected interaction between glob-related policies and the Google Cloud secrets engine. Users may, in some situations, have more privileges than intended, e.g., a user with read permission for the /gcp/roleset/* path may be able to issue Google Cloud service account credentials.

 https://cve.radiocsirt.org/vuln/gsd-2021-42135 gsd-2021-42135 2026-10-18T05:10:51.069902+00:00 gsd-2021-42135