Go/github.com/hashicorp/consul CVE-2021-37219: high 8.8, EPSS 1.15%

HashiCorp Consul Privilege Escalation Vulnerability

Action: Upgrade github.com/hashicorp/consul to 1.8.15 or later.

go get github.com/hashicorp/consul@v1.10.2

go get github.com/hashicorp/consul@v1.9.9

go get github.com/hashicorp/consul@v1.8.15

Affected

Fixed versions

Sources

• osv: GHSA-ccw8-7688-vqx4
• https://nvd.nist.gov/vuln/detail/CVE-2021-37219
• https://github.com/hashicorp/consul/pull/10925
• https://github.com/hashicorp/consul/commit/3357e57dac9aadabd476f7a14973e47f003c4cf0
• https://github.com/hashicorp/consul/commit/473edd1764b6739e2e4610ea5dede4c2bc6009d1
• https://github.com/hashicorp/consul/commit/ccf8eb1947357434eb6e66303ddab79f4c9d4103
• https://discuss.hashicorp.com/t/hcsec-2021-22-consul-raft-rpc-privilege-escalation/29024
• https://github.com/hashicorp/consul
• https://security.gentoo.org/glsa/202207-01
• https://www.hashicorp.com/blog/category/consul

CVE-2021-37219 · published 2021-09-08T20:14:48Z · modified 2026-09-10T03:49:08.760839466Z · JSON