CVE-2026-115364 | OpenBao up to 2.6.2 Agent /agent/v1/quit X-Vault-Header improper authorization

October 22, 2026 Yanac

A vulnerability labeled as problematic has been found in OpenBao up to 2.6.2. This vulnerability affects unknown code of the file /agent/v1/quit of the component Agent. Executing a manipulation of the argument X-Vault-Header can lead to improper authorization.

This vulnerability appears as CVE-2026-115364. The attack may be performed from remote. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More