Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:openbao:openbao:*:*:*:*:*:*:*:*

1 brief RSS
critical advisory

OpenBao Recovery Mode Timing Attack

OpenBao recovery mode is vulnerable to a timing attack (CVE-2026-63132) that allows an unauthenticated attacker to exfiltrate the recovery token and gain administrative control.

OpenBao +1 credential-access vulnerability privilege-escalation secrets-management cve-2026-71543
2t