{"id":"CVE-2026-115358","kind":"vulnerability","aliases":["CVE-2026-115358"],"related":[],"title":"OpenBao: malformed plugin parameters leak sensitive input into audit logs","description":"OpenBao before 2.6.3 contains an information disclosure vulnerability that allows attackers to leak sensitive data into audit logs by sending malformed plugin parameters. Attackers can submit requests with malformed TypeKVPair or TypeHeader field values, causing error messages containing sensitive input to be recorded in audit logs.","summary":"OpenBao before 2.6.3 records error messages containing sensitive input into its audit logs when a request sends malformed TypeKVPair or TypeHeader plugin parameter values. An attacker who can send such requests can read secrets that were passed in those values from the audit log.","severity":"low","cvss":2.0,"epss":0.00195,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["audit-logging","infrastructure","openbao","self-hosted"],"not_affected_if":["version-2.6.3-or-later"],"how_to_check":"- Run `bao version` and compare against `2.6.3`\n- Check whether audit devices are enabled with `bao audit list`\n- unknown","fix":"- Upgrade OpenBao to `2.6.3` or later\n- Restrict who can read audit log files until upgraded","status":"open","published_at":"2026-10-22T19:17:41+00:00","first_seen_at":"2026-10-23T21:57:31+00:00","triaged_at":"2026-10-25T04:50:02+00:00","updated_at":"2026-10-25T04:50:02+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-25T04:50:02Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade OpenBao to `2.6.3` or later\n- Restrict who can read audit log files until upgraded","reach":"unknown","title":"OpenBao: malformed plugin parameters leak sensitive input into audit logs","impact":"low","summary":"OpenBao before 2.6.3 records error messages containing sensitive input into its audit logs when a request sends malformed TypeKVPair or TypeHeader plugin parameter values. An attacker who can send such requests can read secrets that were passed in those values from the audit log.","category":"infrastructure","nicknames":[],"who_cares":["openbao","self-hosted","audit-logging"],"confidence":0.6,"needs_auth":"unknown","worst_case":"Secrets sent in malformed plugin parameters are readable in audit logs","analyst_note":"Confirm from the NVD entry whether unauthenticated requests reach the vulnerable parser and whether the default configuration enables audit devices.","how_to_check":"- Run `bao version` and compare against `2.6.3`\n- Check whether audit devices are enabled with `bao audit list`\n- unknown","needs_analyst":true,"not_affected_if":["version-2.6.3-or-later"],"who_is_affected":"Teams running OpenBao with audit devices enabled, where the audit log is readable by people or systems beyond the operators who need it. The sources do not say whether default configurations are affected or which request paths are reachable without authentication.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000604,"input_tokens":3371,"output_tokens":534,"severity_before":"low"},"analyst_status":null,"analyst_note":null,"search":"'-115358':13A,16A '-2026':12A,15A '2.6.3':27B,71C 'allow':78C 'attack':50B,79C,92C 'audit':9A,18B,36B,67B,85C,113C 'audit-log':17B 'caus':103C 'contain':31B,72C,106C 'cve':11A,14A 'data':83C 'disclosur':75C 'error':29B,104C 'field':101C 'host':24B 'inform':74C 'infrastructur':20B 'input':7A,33B,108C 'leak':5A,81C 'log':10A,19B,37B,68B,86C,114C 'malform':2A,42B,89C,97C 'messag':30B,105C 'openbao':1A,21B,25B,69C 'paramet':4A,47B,91C 'pass':61B 'plugin':3A,46B,90C 'read':57B 'record':28B,111C 'request':40B,55B,95C 'secret':58B 'self':23B 'self-host':22B 'send':41B,53B,88C 'sensit':6A,32B,82C,107C 'submit':94C 'typehead':45B,100C 'typekvpair':43B,98C 'valu':48B,64B,102C 'vulner':76C","nicknames":[],"mitigations":[],"who_affected":"Teams running OpenBao with audit devices enabled, where the audit log is readable by people or systems beyond the operators who need it. The sources do not say whether default configurations are affected or which request paths are reachable without authentication.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-22T19:17:41+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-115358","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-115358","severity":null,"published_at":"2026-10-22T19:17:41+00:00","modified_at":"2026-10-23T14:20:57+00:00","first_seen_at":"2026-10-23T21:57:31+00:00","fetched_at":"2026-10-23T22:29:02+00:00","note":null},{"source":"epss","external_id":"CVE-2026-115358","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-115358","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-24T07:15:51+00:00","fetched_at":"2026-10-24T07:15:51+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}