SecAlerts
HashiCorp logo

HashiCorp

Security Risk Profile

39
/100
low

Security Risk Score

Comprehensive risk assessment based on 323 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from August 2, 2017 to present

323
Total CVEs
126
Critical+High
1
Exploited
61
Unpatched

Threat Assessment

Avg CVSS
7.1
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
61
Critical/High
Risk Level
39/100
low
⚠️ 1 Active Exploits📈 7 in Last 30 Days

Severity Distribution

Critical
22
High
104
Medium
81
Low
5

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
25

Age Distribution

Common Weaknesses (CWE)

1
Path Traversal
12
2
Input Validation
7
3
SSRF
4
4
XSS
4
5
Command Injection
4

Most Affected Products

1. HashiCorp Vault325
2. HashiCorp Nomad184
3. Hashicorp Consul137
4. go/github.com/hashicorp/vault78
5. go/github.com/hashicorp/consul33

Recent Vulnerabilities

See more →

Monitor HashiCorp in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.

HashiCorp Security Vulnerabilities & Risk Score | 323 CVEs | SecAlerts - SecAlerts