{"id":"CVE-2026-115356","kind":"vulnerability","aliases":["CVE-2026-115356"],"related":[],"title":"OpenBao: Kubernetes-auth tokens stay renewable after their service account is deleted","description":"OpenBao before 2.6.4 and 2.7.x before 2.7.1 does not verify, when renewing a token issued by the Kubernetes Auth method, that the service account token originally used to authenticate is still valid. An authenticated attacker can keep renewing such tokens to persist access after the Kubernetes service account has been deleted.","summary":"OpenBao does not re-check the originating Kubernetes service account token when renewing a token issued by the Kubernetes auth method. An attacker who already holds such a token can keep renewing it and retain access after the service account has been deleted.","severity":"medium","cvss":5.4,"epss":0.00174,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["kubernetes","openbao","package","self-hosted"],"not_affected_if":["kubernetes-auth-disabled","managed-hosting"],"how_to_check":"- Check the OpenBao version with `bao version`\n- Review whether the Kubernetes auth method is enabled with `bao auth list`","fix":"- Upgrade OpenBao to `2.6.4` or later on the 2.6 line, or to `2.7.1` or later on the 2.7 line\n- Revoke tokens issued through the Kubernetes auth method for deleted service accounts","status":"open","published_at":"2026-10-22T19:17:41+00:00","first_seen_at":"2026-10-23T21:57:31+00:00","triaged_at":"2026-10-25T04:14:18+00:00","updated_at":"2026-10-25T04:14:18+00:00","category":"package","confidence":0.7,"triage":{"at":"2026-10-25T04:14:18Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade OpenBao to `2.6.4` or later on the 2.6 line, or to `2.7.1` or later on the 2.7 line\n- Revoke tokens issued through the Kubernetes auth method for deleted service accounts","reach":"network","title":"OpenBao: Kubernetes-auth tokens stay renewable after their service account is deleted","impact":"medium","summary":"OpenBao does not re-check the originating Kubernetes service account token when renewing a token issued by the Kubernetes auth method. An attacker who already holds such a token can keep renewing it and retain access after the service account has been deleted.","category":"package","nicknames":[],"who_cares":["openbao","kubernetes","self-hosted"],"confidence":0.7,"needs_auth":"yes","worst_case":"Attacker keeps renewing access after the service account is deleted","analyst_note":"","how_to_check":"- Check the OpenBao version with `bao version`\n- Review whether the Kubernetes auth method is enabled with `bao auth list`","needs_analyst":false,"not_affected_if":["kubernetes-auth-disabled","managed-hosting"],"who_is_affected":"Teams running OpenBao with the Kubernetes auth method enabled, where workloads authenticate using Kubernetes service account tokens. Deployments that do not use the Kubernetes auth method are not exposed through this flaw.","user_interaction":"no","needs_special_setup":"yes","severity_if_unknown":"medium"},"cost_usd":0.000596,"input_tokens":3383,"output_tokens":516,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-115356':16A,19A '-2026':15A,18A '2.6.4':72C '2.7':74C '2.7.1':77C 'access':62B,113C 'account':11A,36B,66B,94C,118C 'alreadi':51B 'attack':49B,105C 'auth':4A,46B,89C 'authent':99C,104C 'check':31B 'cve':14A,17A 'delet':13A,69B,121C 'hold':52B 'host':25B 'issu':42B,85C 'keep':57B,107C 'kubernet':3A,20B,34B,45B,88C,116C 'kubernetes-auth':2A 'method':47B,90C 'openbao':1A,21B,26B,70C 'origin':33B,96C 'packag':22B 'persist':112C 're':30B 're-check':29B 'renew':7A,39B,58B,82C,108C 'retain':61B 'self':24B 'self-host':23B 'servic':10A,35B,65B,93C,117C 'stay':6A 'still':101C 'token':5A,37B,41B,55B,84C,95C,110C 'use':97C 'valid':102C 'verifi':80C 'x':75C","nicknames":[],"mitigations":[],"who_affected":"Teams running OpenBao with the Kubernetes auth method enabled, where workloads authenticate using Kubernetes service account tokens. Deployments that do not use the Kubernetes auth method are not exposed through this flaw.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-22T19:17:41+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-115356","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-115356","severity":null,"published_at":"2026-10-22T19:17:41+00:00","modified_at":"2026-10-23T15:17:28+00:00","first_seen_at":"2026-10-23T21:57:31+00:00","fetched_at":"2026-10-23T22:29:02+00:00","note":null},{"source":"epss","external_id":"CVE-2026-115356","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-115356","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-24T07:15:51+00:00","fetched_at":"2026-10-24T07:15:51+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}