{"id":"CVE-2026-115364","kind":"vulnerability","aliases":["CVE-2026-115364"],"related":[],"title":"OpenBao: missing auth check lets attackers stop Agent and Proxy services","description":"OpenBao before 2.6.3 contains a missing authorization check that allows attackers to stop Agent and Proxy services by omitting the X-Vault-Header. When require_request_header is enabled, attackers can send requests via server-side request forgery to /agent/v1/quit or /proxy/v1/quit to shut down these services.","summary":"OpenBao before 2.6.3 does not check authorization on the Agent and Proxy quit endpoints when the X-Vault-Header is omitted. An attacker can send requests via server-side request forgery to /agent/v1/quit or /proxy/v1/quit and shut those services down.","severity":"low","cvss":2.2,"epss":0.00258,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","openbao","secrets-management","self-hosted"],"not_affected_if":["no-agent-or-proxy","require-request-header-disabled","version-2.6.3-or-later"],"how_to_check":"- Check the OpenBao version with `bao version`; versions below `2.6.3` are affected\n- Check whether `require_request_header` is enabled in the Agent or Proxy configuration\n- unknown whether the sources give a configuration file path or a service name for the check","fix":"- Upgrade OpenBao to `2.6.3` or later\n- unknown whether a configuration workaround exists before the upgrade","status":"open","published_at":"2026-10-22T19:17:42+00:00","first_seen_at":"2026-10-23T21:57:31+00:00","triaged_at":"2026-10-25T04:49:55+00:00","updated_at":"2026-10-25T04:49:55+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-25T04:49:55Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade OpenBao to `2.6.3` or later\n- unknown whether a configuration workaround exists before the upgrade","reach":"unknown","title":"OpenBao: missing auth check lets attackers stop Agent and Proxy services","impact":"low","summary":"OpenBao before 2.6.3 does not check authorization on the Agent and Proxy quit endpoints when the X-Vault-Header is omitted. An attacker can send requests via server-side request forgery to /agent/v1/quit or /proxy/v1/quit and shut those services down.","category":"infrastructure","nicknames":[],"who_cares":["openbao","self-hosted","secrets-management"],"confidence":0.6,"needs_auth":"unknown","worst_case":"Agent and Proxy services shut down, interrupting secret access for dependent apps.","analyst_note":"","how_to_check":"- Check the OpenBao version with `bao version`; versions below `2.6.3` are affected\n- Check whether `require_request_header` is enabled in the Agent or Proxy configuration\n- unknown whether the sources give a configuration file path or a service name for the check","needs_analyst":false,"not_affected_if":["version-2.6.3-or-later","no-agent-or-proxy","require-request-header-disabled"],"who_is_affected":"Teams running OpenBao Agent or Proxy with require_request_header enabled are exposed, since that is the setting the sources name as the trigger. The impact is a denial of service on those services, not data access. Teams not running Agent or Proxy, or running a version at or above 2.6.3, can skip it.","user_interaction":"no","needs_special_setup":"yes","severity_if_unknown":"low"},"cost_usd":0.00063,"input_tokens":3368,"output_tokens":586,"severity_before":"low"},"analyst_status":null,"analyst_note":null,"search":"'-115364':14A,17A '-2026':13A,16A '/agent/v1/quit':60B,108C '/proxy/v1/quit':62B,110C '2.6.3':28B,69C 'agent':8A,35B,80C 'allow':76C 'attack':6A,49B,77C,97C 'auth':3A 'author':32B,73C 'check':4A,31B,74C 'contain':70C 'cve':12A,15A 'enabl':96C 'endpoint':39B 'forgeri':58B,106C 'header':45B,90C,94C 'host':25B 'infrastructur':18B 'let':5A 'manag':22B 'miss':2A,72C 'omit':47B,85C 'openbao':1A,19B,26B,67C 'proxi':10A,37B,82C 'quit':38B 'request':52B,57B,93C,100C,105C 'requir':92C 'secret':21B 'secrets-manag':20B 'self':24B 'self-host':23B 'send':51B,99C 'server':55B,103C 'server-sid':54B,102C 'servic':11A,66B,83C,115C 'shut':64B,112C 'side':56B,104C 'stop':7A,79C 'vault':44B,89C 'via':53B,101C 'x':43B,88C 'x-vault-head':42B,87C","nicknames":[],"mitigations":[],"who_affected":"Teams running OpenBao Agent or Proxy with require_request_header enabled are exposed, since that is the setting the sources name as the trigger. The impact is a denial of service on those services, not data access. Teams not running Agent or Proxy, or running a version at or above 2.6.3, can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-22T19:17:42+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-115364","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-115364","severity":null,"published_at":"2026-10-22T19:17:42+00:00","modified_at":"2026-10-23T15:17:28+00:00","first_seen_at":"2026-10-23T21:57:31+00:00","fetched_at":"2026-10-23T22:29:02+00:00","note":null},{"source":"epss","external_id":"CVE-2026-115364","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-115364","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-24T07:15:51+00:00","fetched_at":"2026-10-24T07:15:51+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}