agentprime: openbaoEvery new CVE for openbao.https://agentprime.io/CVE-2026-115369: OpenBao 2.5.0 before 2.6.2 PKI allowed_ip_sans_cidr Bypass via CSR IP SANshttps://agentprime.io/advisories/CVE-2026-115369/https://agentprime.io/advisories/CVE-2026-115369/CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Oct 2026 19:13:40 GMTCVECVE-2026-115366: OpenBao 2.3.0 before 2.6.3 Missing Root Namespace Enforcement in Plugin Catalog APIshttps://agentprime.io/advisories/CVE-2026-115366/https://agentprime.io/advisories/CVE-2026-115366/CVSS 2.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Oct 2026 19:13:39 GMTCVECVE-2026-115365: OpenBao 2.3.0 before 2.6.3 Incorrect Authorization via Policy Cache Namespace Traversalhttps://agentprime.io/advisories/CVE-2026-115365/https://agentprime.io/advisories/CVE-2026-115365/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Oct 2026 19:13:39 GMTCVECVE-2026-115364: OpenBao before 2.6.3 Missing Header Check on Agent/Proxy Quit Endpointshttps://agentprime.io/advisories/CVE-2026-115364/https://agentprime.io/advisories/CVE-2026-115364/CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Oct 2026 19:13:38 GMTCVECVE-2026-115363: OpenBao 2.2.0 before 2.6.4 and 2.7.0 before 2.7.1 ACME EAB MAC Key Disclosure via Sanitized Configurationhttps://agentprime.io/advisories/CVE-2026-115363/https://agentprime.io/advisories/CVE-2026-115363/CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Oct 2026 19:13:37 GMTCVECVE-2026-115362: OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Expired AppRole SecretID Authentication Bypasshttps://agentprime.io/advisories/CVE-2026-115362/https://agentprime.io/advisories/CVE-2026-115362/CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Oct 2026 19:13:36 GMTCVECVE-2026-115361: OpenBao before 2.6.3 ACL Bypass via Dropped Templated Policy Denialhttps://agentprime.io/advisories/CVE-2026-115361/https://agentprime.io/advisories/CVE-2026-115361/CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Oct 2026 19:13:36 GMTCVECVE-2026-115360: OpenBao before 2.6.3 Open Redirect via OIDC Identity Provider UIhttps://agentprime.io/advisories/CVE-2026-115360/https://agentprime.io/advisories/CVE-2026-115360/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Oct 2026 19:13:35 GMTCVECVE-2026-115359: OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Role-Based Rate Limit Quota Bypass via Request Parsinghttps://agentprime.io/advisories/CVE-2026-115359/https://agentprime.io/advisories/CVE-2026-115359/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Oct 2026 19:13:34 GMTCVECVE-2026-115358: OpenBao before 2.6.3 Sensitive Data Leak in Audit Log via Malformed Parametershttps://agentprime.io/advisories/CVE-2026-115358/https://agentprime.io/advisories/CVE-2026-115358/CVSS 2.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Oct 2026 19:13:34 GMTCVECVE-2026-115357: OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Improper Audit Logging of Root Generation and Rekey Responseshttps://agentprime.io/advisories/CVE-2026-115357/https://agentprime.io/advisories/CVE-2026-115357/CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Oct 2026 19:13:33 GMTCVECVE-2026-115356: OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Kubernetes Auth Method Token Renewal After Revocationhttps://agentprime.io/advisories/CVE-2026-115356/https://agentprime.io/advisories/CVE-2026-115356/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Oct 2026 19:13:32 GMTCVE