en
OpenBao is a global open-source project that develops identity-based secrets and encryption management software. Its core mission is to manage, generate, store, distribute, and protect passwords, certificates, keys, tokens, and other sensitive data. The project is community governed and supports self-managed use across diverse infrastructure environments.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
As of 10/20/2026, openbao recorded 11 security vulnerabilities in the last 90 days across 1 products, including 3 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, openbao had the most security vulnerabilities in the openbao ecosystem, with 11 vulnerabilities—approximately 100% of the provider's total vulnerabilities during this period.
CVE-2026-63132OpenBao's Recovery Mode Vulnerable To Token Leakage via Timing AttackCVE-2026-63131OpenBao LIST ACL bypass: a trailing-slash LIST request skips a more-specific deny rule (unported Vault v2.0.3 fix)CVE-2026-77285OpenBao Agent Writes Secrets to StdoutCVE-2026-71543OpenBao's Templated Policies Allow Privilege Escalation via Wildcard CharactersCVE-2026-55770OpenBao: LDAPi ldaputil (wrong escape func)37 Results | Page 1 of 4
| SeverityMedium |
| SeverityHigh |
| SeverityMedium |
| SeverityLow |
| SeverityLow |
| SeverityHigh |
| SeverityMedium |