CVE-2026-115366 | OpenBao up to 2.6.2 Plugin Registration /v1/sys/plugins/catalog improper authorization

October 22, 2026 Yanac

A vulnerability identified as problematic has been detected in OpenBao up to 2.6.2. This affects an unknown part of the file /v1/sys/plugins/catalog of the component Plugin Registration. Performing a manipulation results in improper authorization.

This vulnerability is reported as CVE-2026-115366. The attack is possible to be carried out remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More