---
id: "CVE-2026-115804"
kind: "vulnerability"
aliases: ["CVE-2026-115804"]
title: "HashiCorp Consul: authenticated users can modify other services' health checks"
severity: "medium"
cvss: 6.4
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["consul", "infrastructure", "kubernetes", "self-hosted", "service-discovery"]
not_affected_if: ["no-acl-users", "single-service-per-node"]
published_at: "2026-10-26T18:17:37+00:00"
first_seen_at: "2026-10-26T18:31:43+00:00"
updated_at: "2026-10-26T18:34:03+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-115804", "first_seen_at": "2026-10-26T18:31:43+00:00"}]
---

# HashiCorp Consul: authenticated users can modify other services' health checks

HashiCorp Consul and Consul Enterprise have an authorization bypass in health check registration. An authenticated user can modify health checks belonging to another service on the same node.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Run `consul version` on each Consul server and agent and compare against the fixed versions.
- Check whether ACLs are enabled and which tokens can register services or checks on shared nodes (unknown if the sources do not say more).

## Fix

- Upgrade Consul Community Edition to `2.1.0`.
- Upgrade Consul Enterprise to `2.1.0` or `1.21.19`.

## Timeline

- 2026-10-26T18:31:43+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-115804

## From the sources

HashiCorp Consul and Consul Enterprise are vulnerable to an authorization bypass in health check registration that may allow an authenticated user to modify health checks belonging to another service on the same node. This vulnerability (CVE-2026-115804) is fixed in Consul Community Edition 2.1.0 and Consul Enterprise 2.1.0 and 1.21.19.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_