---
id: "CVE-2026-105608"
kind: "vulnerability"
aliases: ["CVE-2026-105608"]
title: "HashiCorp Consul: service write permission bypasses mesh write check"
severity: "high"
cvss: 8.8
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["consul", "infrastructure", "kubernetes", "self-hosted", "service-mesh"]
not_affected_if: ["no-service-mesh"]
published_at: "2026-10-26T18:17:26+00:00"
first_seen_at: "2026-10-26T18:31:43+00:00"
updated_at: "2026-10-26T18:33:40+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-105608", "first_seen_at": "2026-10-26T18:31:43+00:00"}]
---

# HashiCorp Consul: service write permission bypasses mesh write check

Consul and Consul Enterprise let a user with service write permission apply Envoy escape-hatch proxy configuration without the mesh write permission that should be required. An attacker with limited service-level access can change how service mesh proxies are configured.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the Consul version with `consul version` and compare it against the fixed releases listed in the fix field.
- Review which accounts or tokens hold service write permission in Consul ACLs and whether they also hold mesh write permission.
- unknown whether the sources give a configuration check beyond the version.

## Fix

- Upgrade Consul Community Edition to `2.1.0`.
- Upgrade Consul Enterprise to `2.1.0` or `1.21.19`, depending on the release line in use.

## Timeline

- 2026-10-26T18:31:43+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-105608

## From the sources

HashiCorp Consul and Consul Enterprise are vulnerable to an authorization bypass in service mesh proxy registration. This may allow a user with service write permission to apply Envoy escape-hatch configuration without the required mesh write permission. This vulnerability (CVE-2026-105608) is fixed in Consul Community Edition 2.1.0 and Consul Enterprise 2.1.0 and 1.21.19.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_