PT-2026-121538

CVE-2026-115358

·

Published

2026-10-22

·

Updated

2026-10-22

Description by

CVSS 3.1
2.0
Low
MetricsAV:N/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N
OpenBao before 2.6.3 contains an information disclosure vulnerability that allows attackers to leak sensitive data into audit logs by sending malformed plugin parameters. Attackers can submit requests with malformed TypeKVPair or TypeHeader field values, causing error messages containing sensitive input to be recorded in audit logs.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-532: Insertion of Sensitive Information into Log File
Related identifiers
CVE-2026-115358
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com