https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 14:52:06 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-09800 bdu:2026-09800 https://cve.radiocsirt.org/vuln/bdu:2026-09800 https://cve.radiocsirt.org/vuln/bit-openbao-2026-42186 <p><strong>Affected:</strong> Bitnami: openbao</p> <p>OpenBao is an open source identity-based secrets management system. Prior to 2.5.3, when OpenBao&#39;s initial namespace deletion fails, subsequent retries fail to properly remove all data before marking the namespace as deleted. This can affect any outstanding leases as well as potentially leaving unrelated storage entries around. This vulnerability is fixed in 2.5.3.</p> <p><strong>Affected:</strong> Bitnami: openbao</p> <p>OpenBao is an open source identity-based secrets management system. Prior to 2.5.3, when OpenBao&#39;s initial namespace deletion fails, subsequent retries fail to properly remove all data before marking the namespace as deleted. This can affect any outstanding leases as well as potentially leaving unrelated storage entries around. This vulnerability is fixed in 2.5.3.</p> https://cve.radiocsirt.org/vuln/bit-openbao-2026-42186 https://cve.radiocsirt.org/vuln/euvd-2026-318533 EUVD-2026-318533 https://cve.radiocsirt.org/vuln/euvd-2026-318533 https://cve.radiocsirt.org/vuln/fkie_cve-2026-42186 <p>OpenBao is an open source identity-based secrets management system. Prior to 2.5.3, when OpenBao&#39;s initial namespace deletion fails, subsequent retries fail to properly remove all data before marking the namespace as deleted. This can affect any outstanding leases as well as potentially leaving unrelated storage entries around. This vulnerability is fixed in 2.5.3.</p> <p>OpenBao is an open source identity-based secrets management system. Prior to 2.5.3, when OpenBao&#39;s initial namespace deletion fails, subsequent retries fail to properly remove all data before marking the namespace as deleted. This can affect any outstanding leases as well as potentially leaving unrelated storage entries around. This vulnerability is fixed in 2.5.3.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-42186 https://cve.radiocsirt.org/vuln/ghsa-vv66-6rp4-wr4f <p><strong>Affected:</strong> Go: github.com/openbao/openbao</p> <p>### Impact</p> <p>When OpenBao&#39;s initial namespace deletion fails, subsequent retries fail to properly remove all data before marking the namespace as deleted. This can affect any outstanding leases as well as potentially leaving unrelated storage entries around.</p> <p>### Patches</p> <p>This will be patched in OpenBao v2.5.3.</p> <p>### Workarounds</p> <p>Users may manually remove mounts prior to deleting the namespace.</p> <p>Audit logs may be used to identify repeated deletion attempts against the same namespace; `sys/raw` can be used to see what leases were not correctly deleted.</p> <p><strong>Affected:</strong> Go: github.com/openbao/openbao</p> <p>### Impact</p> <p>When OpenBao&#39;s initial namespace deletion fails, subsequent retries fail to properly remove all data before marking the namespace as deleted. This can affect any outstanding leases as well as potentially leaving unrelated storage entries around.</p> <p>### Patches</p> <p>This will be patched in OpenBao v2.5.3.</p> <p>### Workarounds</p> <p>Users may manually remove mounts prior to deleting the namespace.</p> <p>Audit logs may be used to identify repeated deletion attempts against the same namespace; `sys/raw` can be used to see what leases were not correctly deleted.</p> https://cve.radiocsirt.org/vuln/ghsa-vv66-6rp4-wr4f https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1345 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in OpenBao ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in OpenBao ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1345