Go/github.com/openbao/openbao CVE-2026-77285: unknown, EPSS 0.13%

OpenBao Agent Writes Secrets to Stdout in github.com/openbao/openbao

Action: Upgrade github.com/openbao/openbao to 0.0.0-20260714163218-90272575e5f5 or later.

go get github.com/openbao/openbao@v0.0.0-20260714163218-90272575e5f5

Affected

Fixed versions

Sources

• osv: GO-2026-6554
• https://github.com/openbao/openbao/security/advisories/GHSA-444v-8vxr-p36h
• https://github.com/openbao/openbao/commit/90272575e5f58b3883fbb0ccb2238e9285722d1a
• https://github.com/openbao/openbao/commit/ee3aa4aff72c5176cf02af21eac7158899080878
• https://github.com/openbao/openbao/pull/3494
• https://github.com/openbao/openbao/pull/3495
• https://github.com/openbao/openbao/releases/tag/v2.6.0

CVE-2026-77285 · published 2026-10-01T20:23:38Z · modified 2026-10-01T20:56:23.916979102Z · JSON