Feed/CVE-2026-77285
CVE-2026-77285LOWCVSS 0.0

OpenBao Agent Writes Secrets to Stdout

Published Sep 22, 2026·Updated Sep 22, 2026

NVD Description

### Impact During certain error conditions, OpenBao Agent's exec rendering mode will incorrectly write secrets specified in `env_template` to stdout. This primarily happens when `num_retries` is met. This vulnerability is original to Vault and was reported via the OpenBao security mailing list. ### Patches This is addressed in OpenBao v2.6.0 GA.

Affected Packages (1)

github.com/openbao/openbaoGO
Fixed in 0.0.0-20260714163218-90272575e5f5

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Register your stack and get notified within minutes when a matching CVE drops.

Start monitoring free