CVE-2026-115369 | OpenBao up to 2.6.1 PKI use_csr_sans certificate validation

October 22, 2026 Yanac

A vulnerability identified as problematic has been detected in OpenBao up to 2.6.1. Affected is an unknown function of the component PKI. This manipulation of the argument use_csr_sans causes improper certificate validation.

This vulnerability appears as CVE-2026-115369. The attack may be initiated remotely. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More