CVE-2026-126309 | OpenBao up to 2.6.4/2.7.1 Key Import path traversal

November 13, 2026 Yanac

A vulnerability was found in OpenBao up to 2.6.4/2.7.1. It has been declared as critical. The affected element is an unknown function of the component Key Import. Executing a manipulation can lead to path traversal.

This vulnerability is registered as CVE-2026-126309. It is possible to launch the attack remotely. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More