CVE-2026-45808

2 advisories.

Go/github.com/openbao/openbao CVE-2026-45808: high, EPSS 0.43%

OpenBao's cross-namespace lease revocation via legacy sys/revoke path bypasses ACL

Action: Upgrade github.com/openbao/openbao to 2.5.4 or later.

go get github.com/openbao/openbao@v2.5.4

Affected

introduced	fixed	last affected
0	2.5.4	-

Fixed versions

2.5.4

Sources

CVE-2026-45808 · published 2026-05-28T17:37:32Z · modified 2026-08-17T08:10:40.466266903Z · JSON

Go/github.com/openbao/openbao CVE-2026-45808: unknown, EPSS 0.43%

OpenBao's cross-namespace lease revocation via legacy sys/revoke path bypasses ACL in github.com/openbao/openbao

Action: No fix published. Pin and monitor.

Affected

introduced	fixed	last affected
0	-	-

Fixed versions

No fixed version in the source.

Sources

CVE-2026-45808 · published 2026-06-25T22:34:38Z · modified 2026-08-17T08:10:40.466266903Z · JSON