CVE-2025-11374

Name of the Vulnerable Software and Affected Versions Consul versions prior to 1.22.0 Consul Enterprise versions prior to 1.22.0 Consul Enterprise version 1.21.6 Consul Enterprise version 1.20.8 Consul Enterprise version 1.18.12

Description The key/value endpoint in Consul and Consul Enterprise is susceptible to a denial of service (DoS) condition. This is caused by improper validation of the Content Length header.

Recommendations Update to Consul Community Edition 1.22.0 or later. Update to Consul Enterprise 1.22.0 or later. Update to Consul Enterprise 1.21.6. Update to Consul Enterprise 1.20.8. Update to Consul Enterprise 1.18.12.