https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T11:05:20.839501+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-vault-2026-5051 BIT-vault-2026-5051 — Audit Log Plugin Directory Guard Bypass via Legacy path Option 2026-10-02T11:05:20.842749+00:00

Affected: Bitnami: vault

HashiCorp Vault and Vault Enterprise prior to 2.0.1 audit device validation logic did not consistently apply plugin directory protections when the legacy file audit path option was used.

This vulnerability (CVE-2026-5051) is fixed in 2.0.1, 1.21.6, 1.20.11, and 1.19.17.

 https://cve.radiocsirt.org/vuln/euvd-2026-331945 EUVD-2026-331945 2026-10-02T11:05:20.842796+00:00 EUVD-2026-331945 https://cve.radiocsirt.org/vuln/fkie_cve-2026-5051 fkie_cve-2026-5051 2026-10-02T11:05:20.842813+00:00

HashiCorp Vault and Vault Enterprise prior to 2.0.1 audit device validation logic did not consistently apply plugin directory protections when the legacy file audit path option was used.

This vulnerability (CVE-2026-5051) is fixed in 2.0.1, 1.21.6, 1.20.11, and 1.19.17.

 https://cve.radiocsirt.org/vuln/ghsa-rx9v-2fjr-mhx5 GHSA-rx9v-2fjr-mhx5 2026-10-02T11:05:20.842837+00:00

HashiCorp Vault and Vault Enterprise prior to 2.0.1 audit device validation logic did not consistently apply plugin directory protections when the legacy file audit path option was used.

This vulnerability (CVE-2026-5051) is fixed in 2.0.1, 1.21.6, 1.20.11, and 1.19.17.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2167 WID-SEC-W-2026-2167 — Hashicorp Vault: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2026-10-02T11:05:20.842853+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Hashicorp Vault ausnutzen, um Sicherheitsvorkehrungen zu umgehen.