Go/github.com/openbao/openbao CVE-2026-55774: unknown, EPSS 0.56%
OpenBao: Cross-namespace lease revocation/renewal via canonical sys/leases/{revoke,renew} — incomplete fix of CVE-2026-45808 in github.com/openbao/openbao
Action: Upgrade github.com/openbao/openbao to 0.0.0-20260617103932-b20b999dd404 or later.
go get github.com/openbao/openbao@v0.0.0-20260617103932-b20b999dd404Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
| 0.0.0-20260617103932-b20b999dd404 |
Sources
- osv: GO-2026-5304
- https://github.com/openbao/openbao/security/advisories/GHSA-c36x-h252-g9x2
- https://github.com/openbao/openbao/commit/b20b999dd4044d7b419a5472d8fe08407828be37
- https://github.com/openbao/openbao/pull/3307
- https://github.com/openbao/openbao/releases/tag/v2.5.5
CVE-2026-55774 · published · modified · JSON