HashiCorp Consul-k8s: Cross-namespace authorization bypass (CVE-2026-110720)
Consul-k8s versions 0.42.0 and later are vulnerable to a cross-namespace authorization bypass in component ACL binding rules that may allow an attacker to obtain elevated Consul privileges.
CVE search metadata
CVE search record: CVE-2026-110720. Severity: critical. CVSS: 9.9. KEV: no. Brief: HashiCorp Consul-k8s: Cross-namespace authorization bypass (CVE-2026-110720). Brief link: https://feed.craftedsignal.io/briefs/2026-10-consul-k8s-acl-bypass/
Triage facts
Revision 2- Evidence
- Unknown
- Severity
- Critical
- Sources
- 2 public sources
- Freshness
- Revision 2Oct 26, 21:06 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
Revision history 1 entry · Revision 2
- Revision 2
poc_available
Changed: affected_vendors, has_poc, lastmod, poc_references, references, updates
Sources: 1
Consul-k8s versions 0.42.0 and later are vulnerable to a cross-namespace authorization bypass in component ACL binding rules that may allow an attacker to obtain elevated Consul privileges. This vulnerability is identified as CVE-2026-110720 and has a CVSS v3.1 base score of 9.9. This vulnerability is fixed in consul-k8s versions 2.1.0 and 1.8.18.