https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 04:01:54 +0000 https://cve.radiocsirt.org/vuln/bit-openbao-2026-77285 <p><strong>Affected:</strong> Bitnami: openbao</p> <p>OpenBao is an open source identity-based secrets management system. Prior to 2.6.0, OpenBao Agent&#39;s exec rendering mode could write secrets from env_template to standard output when command/agent/exec/exec.go re-created the template runner after repeated rendering failures, primarily after num_retries was reached. A process supervisor, log collector, or local user able to read that output could obtain the rendered secret values. This issue is fixed in version 2.6.0.</p> <p><strong>Affected:</strong> Bitnami: openbao</p> <p>OpenBao is an open source identity-based secrets management system. Prior to 2.6.0, OpenBao Agent&#39;s exec rendering mode could write secrets from env_template to standard output when command/agent/exec/exec.go re-created the template runner after repeated rendering failures, primarily after num_retries was reached. A process supervisor, log collector, or local user able to read that output could obtain the rendered secret values. This issue is fixed in version 2.6.0.</p> https://cve.radiocsirt.org/vuln/bit-openbao-2026-77285 https://cve.radiocsirt.org/vuln/euvd-2026-374350 EUVD-2026-374350 https://cve.radiocsirt.org/vuln/euvd-2026-374350 https://cve.radiocsirt.org/vuln/fkie_cve-2026-77285 <p>OpenBao is an open source identity-based secrets management system. Prior to 2.6.0, OpenBao Agent&#39;s exec rendering mode could write secrets from env_template to standard output when command/agent/exec/exec.go re-created the template runner after repeated rendering failures, primarily after num_retries was reached. A process supervisor, log collector, or local user able to read that output could obtain the rendered secret values. This issue is fixed in version 2.6.0.</p> <p>OpenBao is an open source identity-based secrets management system. Prior to 2.6.0, OpenBao Agent&#39;s exec rendering mode could write secrets from env_template to standard output when command/agent/exec/exec.go re-created the template runner after repeated rendering failures, primarily after num_retries was reached. A process supervisor, log collector, or local user able to read that output could obtain the rendered secret values. This issue is fixed in version 2.6.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-77285 https://cve.radiocsirt.org/vuln/ghsa-444v-8vxr-p36h <p><strong>Affected:</strong> Go: github.com/openbao/openbao</p> <p>### Impact</p> <p>During certain error conditions, OpenBao Agent&#39;s exec rendering mode will incorrectly write secrets specified in `env_template` to stdout. This primarily happens when `num_retries` is met.</p> <p>This vulnerability is original to Vault and was reported via the OpenBao security mailing list.</p> <p>### Patches</p> <p>This is addressed in OpenBao v2.6.0 GA.</p> <p><strong>Affected:</strong> Go: github.com/openbao/openbao</p> <p>### Impact</p> <p>During certain error conditions, OpenBao Agent&#39;s exec rendering mode will incorrectly write secrets specified in `env_template` to stdout. This primarily happens when `num_retries` is met.</p> <p>This vulnerability is original to Vault and was reported via the OpenBao security mailing list.</p> <p>### Patches</p> <p>This is addressed in OpenBao v2.6.0 GA.</p> https://cve.radiocsirt.org/vuln/ghsa-444v-8vxr-p36h https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2343 <p>Ein Angreifer kann mehrere Schwachstellen in OpenBao ausnutzen, um seine Privilegien zu erhöhen, Sicherheitsmaßnahmen zu umgehen oder vertrauliche Informationen offenzulegen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in OpenBao ausnutzen, um seine Privilegien zu erhöhen, Sicherheitsmaßnahmen zu umgehen oder vertrauliche Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2343