CVE-2026-105820 | HashiCorp Vault Enterprise prior 2.1.2/1.21.12/1.20.17/1.19.23 ACL Policy Cache path traversal

October 8, 2026 Yanac

A vulnerability was found in HashiCorp Vault Enterprise. It has been classified as critical. Impacted is an unknown function of the component ACL Policy Cache. This manipulation causes path traversal.

The identification of this vulnerability is CVE-2026-105820. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More