HashiCorp Consul: Authorization bypass in service mesh proxy registration (CVE-2026-105608)
An authorization bypass in HashiCorp Consul and Consul Enterprise service mesh proxy registration allows users with service write permission to apply Envoy escape-hatch configuration without the required mesh write permission.
CVE search metadata
CVE search record: CVE-2026-105608. Severity: high. CVSS: 8.8. KEV: no. Brief: HashiCorp Consul: Authorization bypass in service mesh proxy registration (CVE-2026-105608). Brief link: https://feed.craftedsignal.io/briefs/2026-10-hashicorp-consul-auth-bypass/
Triage facts
Revision 2- Evidence
- Unknown
- Severity
- High
- Sources
- 2 public sources
- Freshness
- Revision 2Oct 26, 21:06 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
Revision history 1 entry · Revision 2
- Revision 2
poc_available
Changed: affected_vendors, has_poc, lastmod, poc_references, references, updates
Sources: 1
HashiCorp Consul and Consul Enterprise are vulnerable to an authorization bypass in service mesh proxy registration (CVE-2026-105608). This vulnerability allows a user with service write permission to apply Envoy escape-hatch configuration without the required mesh write permission. This issue is resolved in Consul Community Edition 2.1.0 and Consul Enterprise 2.1.0 and 1.21.19.