Skip to content
Threat Feed
Subscribe

Product

OpenBao (< 0.0.0-20260710001938-2d4ebafec5c5, 0.1.0-1.1.5)

1 brief RSS
critical advisory

OpenBao Recovery Mode Timing Attack

OpenBao recovery mode is vulnerable to a timing attack (CVE-2026-63132) that allows an unauthenticated attacker to exfiltrate the recovery token and gain administrative control.

OpenBao +1 credential-access vulnerability privilege-escalation secrets-management cve-2026-71543
2t