CVE-2026-115365 | OpenBao up to 2.6.2 ACL Policy Cache improper authorization

October 22, 2026 Yanac

A vulnerability, which was classified as very critical, has been found in OpenBao up to 2.6.2. Impacted is an unknown function of the component ACL Policy Cache. This manipulation causes improper authorization.

The identification of this vulnerability is CVE-2026-115365. It is possible to initiate the attack remotely. There is no exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More