Skip to content
Threat Feed
Subscribe

Product

OpenBao (0.1.0 to 1.1.5, < 0.0.0-20260713141742-763625a20721)

1 brief RSS
critical advisory

OpenBao Recovery Mode Timing Attack

OpenBao recovery mode is vulnerable to a timing attack (CVE-2026-63132) that allows an unauthenticated attacker to exfiltrate the recovery token and gain administrative control.

OpenBao +1 credential-access vulnerability privilege-escalation secrets-management cve-2026-71543
2t