{"action":"Upgrade github.com/openbao/openbao to 0.0.0-20260714163218-90272575e5f5 or later.","affected":[{"introduced":"0"}],"component":"github.com/openbao/openbao","cve_ids":["CVE-2026-77285"],"ecosystem":"Go","epss":0.00125,"exploited":false,"fixed_versions":["0.0.0-20260714163218-90272575e5f5"],"ghsa_id":"GHSA-444v-8vxr-p36h","id":"tcs_01M5KGVC7CXB0DMSTSW4TM7Q3S","modified_at":"2026-10-01T20:56:23.916979102Z","published_at":"2026-10-01T20:23:38Z","references":["https://osv.dev/vulnerability/GO-2026-6554","https://github.com/openbao/openbao/security/advisories/GHSA-444v-8vxr-p36h","https://github.com/openbao/openbao/commit/90272575e5f58b3883fbb0ccb2238e9285722d1a","https://github.com/openbao/openbao/commit/ee3aa4aff72c5176cf02af21eac7158899080878","https://github.com/openbao/openbao/pull/3494","https://github.com/openbao/openbao/pull/3495","https://github.com/openbao/openbao/releases/tag/v2.6.0"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2026-6554","url":"https://osv.dev/vulnerability/GO-2026-6554"}],"summary":"OpenBao Agent Writes Secrets to Stdout in github.com/openbao/openbao"}