CVE-2026-115363 | OpenBao up to 2.6.3/2.7.0 Sanitized Configuration Endpoint sanitized tls_acme_eab_mac_key information disclosure

October 22, 2026 Yanac

A vulnerability described as problematic has been identified in OpenBao up to 2.6.3/2.7.0. Impacted is an unknown function of the file /sys/config/state/sanitized of the component Sanitized Configuration Endpoint. The manipulation of the argument tls_acme_eab_mac_key results in information disclosure.

This vulnerability is known as CVE-2026-115363. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More