CVE-2026-55776 | OpenBao up to 2.5.4 Transit Policy backend.go Type denial of service

September 15, 2026 Yanac

A vulnerability marked as problematic has been reported in OpenBao up to 2.5.4. The impacted element is an unknown function of the file builtin/logical/transit/backend.go of the component Transit Policy. The manipulation of the argument Type leads to denial of service.

This vulnerability is referenced as CVE-2026-55776. Remote exploitation of the attack is possible. No exploit is available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More