CVE-2026-5006

Name of the Vulnerable Software and Affected Versions HashiCorp Vault versions prior to 2.0.4 HashiCorp Vault Enterprise versions prior to 2.0.4 HashiCorp Vault Enterprise versions prior to 1.21.9 HashiCorp Vault Enterprise versions prior to 1.20.14 HashiCorp Vault Enterprise versions prior to 1.19.20

Description An authenticated attacker can manipulate an identity value used in a templated policy path to obtain unauthorized access to Vault paths. By inserting slash (/) characters into the referenced identity value, the attacker can cause Vault to interpret these as additional path segments during policy rendering.

Recommendations Update HashiCorp Vault to version 2.0.4. Update HashiCorp Vault Enterprise to version 2.0.4, 1.21.9, 1.20.14, or 1.19.20.