{"id":"CVE-2026-115361","kind":"vulnerability","aliases":["CVE-2026-115361"],"related":[],"title":"OpenBao: ACL bypass drops explicit deny rules under wildcard grants","description":"OpenBao before 2.6.3 contains an ACL bypass vulnerability that silently drops explicit deny rules based on forbidden identity metadata templates within wildcard grants. Attackers whose identity metadata contains wildcard or path segments can access paths that should be denied within the broader wildcard-granted scope.","summary":"OpenBao before 2.6.3 silently drops explicit deny rules when they are based on forbidden identity metadata templates inside wildcard grants. An attacker whose identity metadata contains wildcard or path segments can reach paths that should have been denied.","severity":"medium","cvss":4.1,"epss":0.00205,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["openbao","package","secrets-management","self-hosted"],"not_affected_if":["no-templated-acl-policies","patched-2.6.3-or-later"],"how_to_check":"- Check the installed OpenBao version with `bao version` and compare it to `2.6.3`.\n- Review ACL policies that use identity metadata templates (for example `{{identity.entity.metadata.*}}`) together with wildcard path grants.","fix":"- Upgrade OpenBao to `2.6.3` or later.\n- Until upgraded, avoid combining identity metadata templates with wildcard grants, and review explicit deny rules that sit under broader wildcard grants.","status":"open","published_at":"2026-10-22T19:17:42+00:00","first_seen_at":"2026-10-23T21:57:31+00:00","triaged_at":"2026-10-25T04:41:47+00:00","updated_at":"2026-10-25T04:41:47+00:00","category":"package","confidence":0.6,"triage":{"at":"2026-10-25T04:41:47Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade OpenBao to `2.6.3` or later.\n- Until upgraded, avoid combining identity metadata templates with wildcard grants, and review explicit deny rules that sit under broader wildcard grants.","reach":"network","title":"OpenBao: ACL bypass drops explicit deny rules under wildcard grants","impact":"medium","summary":"OpenBao before 2.6.3 silently drops explicit deny rules when they are based on forbidden identity metadata templates inside wildcard grants. An attacker whose identity metadata contains wildcard or path segments can reach paths that should have been denied.","category":"package","nicknames":[],"who_cares":["openbao","self-hosted","secrets-management"],"confidence":0.6,"needs_auth":"yes","worst_case":"Attacker reads or modifies paths that explicit deny rules should block","analyst_note":"Confirm the exact affected policy conditions and any published advisory text at the NVD entry linked in the sources; the description alone does not name the exact template syntax.","how_to_check":"- Check the installed OpenBao version with `bao version` and compare it to `2.6.3`.\n- Review ACL policies that use identity metadata templates (for example `{{identity.entity.metadata.*}}`) together with wildcard path grants.","needs_analyst":true,"not_affected_if":["patched-2.6.3-or-later","no-templated-acl-policies"],"who_is_affected":"Teams running OpenBao before 2.6.3 whose ACL policies combine wildcard path grants with identity metadata templates. Deployments that use only static, non-templated policies are less exposed; the sources do not say more.","user_interaction":"no","needs_special_setup":"yes","severity_if_unknown":"medium"},"cost_usd":0.000639,"input_tokens":3370,"output_tokens":605,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-115361':13A,16A '-2026':12A,15A '2.6.3':27B,65C 'access':96C 'acl':2A,68C 'attack':46B,86C 'base':36B,77C 'broader':104C 'bypass':3A,69C 'contain':50B,66C,90C 'cve':11A,14A 'deni':6A,31B,62B,75C,101C 'drop':4A,29B,73C 'explicit':5A,30B,74C 'forbidden':38B,79C 'grant':10A,44B,85C,107C 'host':24B 'ident':39B,48B,80C,88C 'insid':42B 'manag':21B 'metadata':40B,49B,81C,89C 'openbao':1A,17B,25B,63C 'packag':18B 'path':53B,57B,93C,97C 'reach':56B 'rule':7A,32B,76C 'scope':108C 'secret':20B 'secrets-manag':19B 'segment':54B,94C 'self':23B 'self-host':22B 'silent':28B,72C 'templat':41B,82C 'vulner':70C 'whose':47B,87C 'wildcard':9A,43B,51B,84C,91C,106C 'wildcard-gr':105C 'within':83C,102C","nicknames":[],"mitigations":[],"who_affected":"Teams running OpenBao before 2.6.3 whose ACL policies combine wildcard path grants with identity metadata templates. Deployments that use only static, non-templated policies are less exposed; the sources do not say more.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-22T19:17:42+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-115361","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-115361","severity":null,"published_at":"2026-10-22T19:17:42+00:00","modified_at":"2026-10-23T14:20:57+00:00","first_seen_at":"2026-10-23T21:57:31+00:00","fetched_at":"2026-10-23T22:29:02+00:00","note":null},{"source":"epss","external_id":"CVE-2026-115361","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-115361","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-24T07:15:51+00:00","fetched_at":"2026-10-24T07:15:51+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}