Latest vulnerabilities for vendor "hashicorp"

HashiCorp NomadNomad vulnerable to cross-namespace host volume claim deletion

Risk 29

Severity

4.2

First published (updated )

CVE-2026-14896

HashiCorp consul-templateConsul-template is vulnerable to path redirection in writeToFile through symlink attack

Risk 28

Severity

4.7

First published (updated )

CVE-2026-14361

HashiCorp NomadNomad vulnerable to sandbox escape in Docker task driver

Risk 59

Severity

8.7

First published (updated )

CVE-2026-14891

HashiCorp NomadNomad Docker driver Linux host namespace bypass

Risk 44

Severity

7.7

First published (updated )

CVE-2026-14373

HashiCorp memberlistDenial of service via crafted push/pull gossip message in memberlist

Risk 30

Severity

4.9

First published (updated )

CVE-2026-14362

HashiCorp Terraform EnterprisePath traversal allows arbitrary file read in Terraform Enterprise container

Risk 44

Severity

7.7

First published (updated )

CVE-2026-14468

HashiCorp VaultAudit Log Plugin Directory Guard Bypass via Legacy path Option

Risk 26

Severity

4.4

First published (updated )

CVE-2026-5051

HashiCorp Consul 2.0End of life details

First published (updated )

EOL-consul-2.0

Accurics TerrascanSSRF

Risk 49

Severity

9.2

First published (updated )

CVE-2026-47357

HashiCorp NomadNomad vulnerable to path traversal in dynamic host volume which may lead to code execution

Risk 56

Severity

8.8

EPSS

0.04%

First published (updated )

CVE-2026-7474

HashiCorp Nomad exec2 task driverNomad's exec2 task driver vulnerable to arbitrary file read/write on client host through symlink attack

Risk 24

Severity

6

EPSS

0.03%

First published (updated )

CVE-2026-8052

HashiCorp NomadNomad vulnerable to arbitrary file read/write on client host through symlink attack

Risk 24

Severity

6

EPSS

0.01%

First published (updated )

CVE-2026-6959

HashiCorp consul-templateConsul-template vulnerable to sandbox path bypass in file helper via a symlink attack

Risk 28

Severity

4.7

First published (updated )

CVE-2026-5061

HashiCorp BoundaryBoundary Workers Vulnerable to Denial of Service During TLS Handshake

Risk 31

Severity

7.5

EPSS

0.04%

First published (updated )

CVE-2026-7776

HashiCorp Terraform 1.15End of life details

First published (updated )

EOL-terraform-1.15

HashiCorp Nomad 2.0End of life details

First published (updated )

EOL-nomad-2.0

HashiCorp Vault Community EditionVault is vulnerable to a denial-of-service condition where an unauthenticated attacker can repeatedl…

Risk 33

Severity

7

First published (updated )

REDHAT-BUG-2459109

HashiCorp VaultIf a Vault auth mount is configured to pass through the "Authorization" header, and the "Authorizati…

Risk 33

Severity

7

First published (updated )

REDHAT-BUG-2459107

HashiCorp Vault Community EditionAn authenticated user with access to a kvv2 path through a policy containing a glob may be able to d…

Risk 33

Severity

7

First published (updated )

REDHAT-BUG-2459105

HashiCorp VaultVault Vulnerable to Denial-of-Service via Unauthenticated Root Token Generation/Rekey Operations

Risk 31

Severity

7.5

EPSS

0.02%

First published (updated )

CVE-2026-5807

HashiCorp VaultVault Token Leaked to Backends via Authorization: Bearer Passthrough Header

Risk 79

Severity

8.8

First published (updated )

CVE-2026-4525

HashiCorp VaultVault Vulnerable to Server-Side Request Forgery in ACME Challenge Validation via Attacker-Controlled DNS

Risk 34

Severity

8.6

EPSS

0.01%

First published (updated )

CVE-2026-5052

HashiCorp VaultVault KVv2 Metadata and Secret Deletion Policy Bypass Denial-of-Service

Risk 60

Severity

8.1

First published (updated )

CVE-2026-3605

HashiCorp Vault 2.0End of life details

First published (updated )

EOL-hashicorp-vault-2.0

go/github.com/hashicorp/consulConsul vulnerable to arbitrary file reads through the vault kubernetes authentication provider

Risk 37

Severity

6.8

First published (updated )

CVE-2026-2808

HashiCorp Jenkins HashiCorp Vault PluginJenkins HashiCorp Vault Plugin 371.v884a_4dd60fb_6 and earlier does not set the appropriate context …

Risk 24

Severity

4.3

First published (updated )

CVE-2025-67642

HashiCorp Vault Terraform ProviderVault Terraform Provider Applied Incorrect Defaults for LDAP Auth Method

Risk 86

Severity

9.8

First published (updated )

CVE-2025-13357

HashiCorp TerraformTerraform Enterprise state versions can be created by users with specific permissions without sufficient write access

Risk 22

Severity

4.3

First published (updated )

CVE-2025-13432

HashiCorp Terraform 1.14End of life details

First published (updated )

EOL-terraform-1.14

HashiCorp Nomad 1.11End of life details

First published (updated )

EOL-nomad-1.11

Trending

Vendor Risk Score

Software

HashiCorp NomadNomad vulnerable to cross-namespace host volume claim deletion

HashiCorp consul-templateConsul-template is vulnerable to path redirection in writeToFile through symlink attack

HashiCorp NomadNomad vulnerable to sandbox escape in Docker task driver

HashiCorp NomadNomad Docker driver Linux host namespace bypass

HashiCorp memberlistDenial of service via crafted push/pull gossip message in memberlist

Don't miss critical vulnerabilities

HashiCorp Terraform EnterprisePath traversal allows arbitrary file read in Terraform Enterprise container

HashiCorp VaultAudit Log Plugin Directory Guard Bypass via Legacy path Option

HashiCorp Consul 2.0End of life details

Accurics TerrascanSSRF

HashiCorp NomadNomad vulnerable to path traversal in dynamic host volume which may lead to code execution

Don't miss critical vulnerabilities

HashiCorp Nomad exec2 task driverNomad's exec2 task driver vulnerable to arbitrary file read/write on client host through symlink attack

HashiCorp NomadNomad vulnerable to arbitrary file read/write on client host through symlink attack

HashiCorp consul-templateConsul-template vulnerable to sandbox path bypass in file helper via a symlink attack

HashiCorp BoundaryBoundary Workers Vulnerable to Denial of Service During TLS Handshake

HashiCorp Terraform 1.15End of life details

Don't miss critical vulnerabilities

HashiCorp Nomad 2.0End of life details

HashiCorp Vault Community EditionVault is vulnerable to a denial-of-service condition where an unauthenticated attacker can repeatedl…

HashiCorp VaultIf a Vault auth mount is configured to pass through the "Authorization" header, and the "Authorizati…

HashiCorp Vault Community EditionAn authenticated user with access to a kvv2 path through a policy containing a glob may be able to d…

HashiCorp VaultVault Vulnerable to Denial-of-Service via Unauthenticated Root Token Generation/Rekey Operations

Don't miss critical vulnerabilities

HashiCorp VaultVault Token Leaked to Backends via Authorization: Bearer Passthrough Header

HashiCorp VaultVault Vulnerable to Server-Side Request Forgery in ACME Challenge Validation via Attacker-Controlled DNS

HashiCorp VaultVault KVv2 Metadata and Secret Deletion Policy Bypass Denial-of-Service

HashiCorp Vault 2.0End of life details

go/github.com/hashicorp/consulConsul vulnerable to arbitrary file reads through the vault kubernetes authentication provider

Don't miss critical vulnerabilities

HashiCorp Jenkins HashiCorp Vault PluginJenkins HashiCorp Vault Plugin 371.v884a_4dd60fb_6 and earlier does not set the appropriate context …

HashiCorp Vault Terraform ProviderVault Terraform Provider Applied Incorrect Defaults for LDAP Auth Method

HashiCorp TerraformTerraform Enterprise state versions can be created by users with specific permissions without sufficient write access

HashiCorp Terraform 1.14End of life details

HashiCorp Nomad 1.11End of life details

Don't miss critical vulnerabilities

Company

Resources

Contact