{"id":"CVE-2026-110720","kind":"vulnerability","aliases":["CVE-2026-110720"],"related":[],"title":"Consul-k8s: cross-namespace ACL bypass lets attackers gain elevated Consul privileges","description":"Consul-k8s versions 0.42.0 and later are vulnerable to a cross-namespace authorization bypass in component ACL binding rules that may allow an attacker to obtain elevated Consul privileges. This vulnerability (CVE-2026-110720) is fixed in consul-k8s 2.1.0 and 1.8.18.","summary":"Consul-k8s, the Kubernetes integration for HashiCorp Consul, has a cross-namespace authorization bypass in its component ACL binding rules. An attacker can obtain elevated Consul privileges.","severity":"critical","cvss":9.9,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["consul","hashicorp","infrastructure","kubernetes"],"not_affected_if":["default-config"],"how_to_check":"- Check the consul-k8s version in use, for example with `consul-k8s version` or the image tag of the consul-k8s controller deployment.\n- Confirm whether the installed version is `0.42.0` or later and below the fixed releases.","fix":"- Upgrade consul-k8s to `2.1.0` (or `1.8.18` on the 1.8 line).","status":"open","published_at":"2026-10-26T19:16:29+00:00","first_seen_at":"2026-10-26T19:32:06+00:00","triaged_at":"2026-10-26T19:33:57+00:00","updated_at":"2026-10-26T19:33:57+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-26T19:33:57Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade consul-k8s to `2.1.0` (or `1.8.18` on the 1.8 line).","reach":"unknown","title":"Consul-k8s: cross-namespace ACL bypass lets attackers gain elevated Consul privileges","impact":"high","summary":"Consul-k8s, the Kubernetes integration for HashiCorp Consul, has a cross-namespace authorization bypass in its component ACL binding rules. An attacker can obtain elevated Consul privileges.","category":"infrastructure","nicknames":[],"who_cares":["consul","kubernetes","hashicorp"],"confidence":0.6,"needs_auth":"unknown","worst_case":"attacker gains elevated Consul privileges across namespaces","analyst_note":"Sources give only the NVD summary; check the HashiCorp security advisory for the exact preconditions, the attacker's starting access, and whether ACLs must be enabled.","how_to_check":"- Check the consul-k8s version in use, for example with `consul-k8s version` or the image tag of the consul-k8s controller deployment.\n- Confirm whether the installed version is `0.42.0` or later and below the fixed releases.","needs_analyst":true,"not_affected_if":["default-config"],"who_is_affected":"Teams running consul-k8s 0.42.0 or later on Kubernetes with Consul ACLs enabled are exposed, since the flaw is in how component ACL binding rules cross namespaces. Clusters on earlier releases or without Consul ACLs are not described as affected.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.00062,"input_tokens":3336,"output_tokens":572,"severity_before":"critical"},"analyst_status":null,"analyst_note":null,"search":"'-110720':17A,20A,89C '-2026':16A,19A,88C '0.42.0':58C '1.8.18':98C '2.1.0':96C 'acl':7A,44B,72C 'allow':77C 'attack':10A,48B,79C 'author':39B,68C 'bind':45B,73C 'bypass':8A,40B,69C 'compon':43B,71C 'consul':2A,13A,21B,26B,33B,52B,55C,83C,94C 'consul-k8s':1A,25B,54C,93C 'cross':5A,37B,66C 'cross-namespac':4A,36B,65C 'cve':15A,18A,87C 'elev':12A,51B,82C 'fix':91C 'gain':11A 'hashicorp':22B,32B 'infrastructur':23B 'integr':30B 'k8s':3A,27B,56C,95C 'kubernet':24B,29B 'later':60C 'let':9A 'may':76C 'namespac':6A,38B,67C 'obtain':50B,81C 'privileg':14A,53B,84C 'rule':46B,74C 'version':57C 'vulner':62C,86C","nicknames":[],"mitigations":[],"who_affected":"Teams running consul-k8s 0.42.0 or later on Kubernetes with Consul ACLs enabled are exposed, since the flaw is in how component ACL binding rules cross namespaces. Clusters on earlier releases or without Consul ACLs are not described as affected.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T19:16:29+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss_by":"security@hashicorp.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-110720","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110720","severity":null,"published_at":"2026-10-26T19:16:29+00:00","modified_at":"2026-10-26T19:16:29+00:00","first_seen_at":"2026-10-26T19:32:06+00:00","fetched_at":"2026-10-26T19:32:06+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}