CVE-2026-55102 | kyndryl-open-source hashi-vault-js up to 0.5.1 src/Vault.js parseAxiosError missing encryption

September 14, 2026 Yanac

A vulnerability marked as problematic has been reported in kyndryl-open-source hashi-vault-js up to 0.5.1. Impacted is the function parseAxiosError of the file src/Vault.js. Performing a manipulation results in missing encryption of sensitive data.

This vulnerability is reported as CVE-2026-55102. The attack requires a local approach. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More