CVE-2026-63132 | OpenBao up to 2.5.5 Recovery Mode timing discrepancy

September 22, 2026 Yanac

A vulnerability described as problematic has been identified in OpenBao up to 2.5.5. This issue affects some unknown processing of the component Recovery Mode. Executing a manipulation can lead to observable timing discrepancy.

This vulnerability is tracked as CVE-2026-63132. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More