{"id":"CVE-2026-126311","kind":"vulnerability","aliases":["CVE-2026-126311"],"related":[],"title":"OpenBao: unescaped wildcards in SSH certificate principals enable broad certificates","description":"OpenBao before 2.6.5 and 2.7.x before 2.7.2 does not neutralize wildcard characters in SSH certificate principals rendered from unvalidated external token metadata via identity templates in the SSH secrets engine. Attackers controlling that metadata, typically through a compromised identity provider, can inject '*' to obtain SSH certificates valid for multiple hosts or users.","summary":"OpenBao's SSH secrets engine builds certificate principals from external token metadata without neutralizing '*' wildcard characters. An attacker who controls that metadata, typically through a compromised identity provider, can obtain SSH certificates valid for multiple hosts or users.","severity":"medium","cvss":5.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["openbao","package","self-hosted","ssh","vault-compatible"],"not_affected_if":["no-ssh-secrets-engine","static-principals","trusted-identity-provider"],"how_to_check":"- Check the OpenBao server version with `bao version`; versions before `2.6.5` and `2.7.x` before `2.7.2` are affected.\n- Look for SSH secrets engine roles that use identity templates to build principals from token metadata.\n- Review which identity providers can set that token metadata.","fix":"- OpenBao `2.6.5` and later in the 2.6 line\n- OpenBao `2.7.2` and later in the 2.7 line","status":"open","published_at":"2026-11-13T10:17:36+00:00","first_seen_at":"2026-11-13T10:47:15+00:00","triaged_at":"2026-11-13T10:56:47+00:00","updated_at":"2026-11-13T10:56:47+00:00","category":"package","confidence":0.7,"triage":{"at":"2026-11-13T10:56:47Z","model":"claude-haiku-5-5","output":{"fix":"- OpenBao `2.6.5` and later in the 2.6 line\n- OpenBao `2.7.2` and later in the 2.7 line","reach":"network","title":"OpenBao: unescaped wildcards in SSH certificate principals enable broad certificates","impact":"medium","summary":"OpenBao's SSH secrets engine builds certificate principals from external token metadata without neutralizing '*' wildcard characters. An attacker who controls that metadata, typically through a compromised identity provider, can obtain SSH certificates valid for multiple hosts or users.","audience":"businesses","category":"package","nicknames":[],"who_cares":["openbao","ssh","vault-compatible","self-hosted"],"confidence":0.7,"fix_status":"available","needs_auth":"yes","worst_case":"attacker obtains SSH certificates valid for multiple hosts or users","analyst_note":"","how_to_check":"- Check the OpenBao server version with `bao version`; versions before `2.6.5` and `2.7.x` before `2.7.2` are affected.\n- Look for SSH secrets engine roles that use identity templates to build principals from token metadata.\n- Review which identity providers can set that token metadata.","plain_action":"","product_name":"","needs_analyst":false,"not_affected_if":["no-ssh-secrets-engine","static-principals","trusted-identity-provider"],"who_is_affected":"Teams running OpenBao with the SSH secrets engine whose roles render certificate principals from identity templates fed by external token metadata. Deployments that do not use the SSH secrets engine, or that do not template principals from token metadata, are less exposed. Exposure also depends on how far the upstream identity provider can be trusted.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"yes","severity_if_unknown":"medium"},"cost_usd":0.000782,"input_tokens":4636,"output_tokens":637,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-126311':13A,16A '-2026':12A,15A '2.6.5':66C '2.7':68C '2.7.2':71C 'attack':43B,95C 'broad':9A 'build':31B 'certif':6A,10A,32B,57B,79C,110C 'charact':41B,76C 'compat':25B 'compromis':51B,102C 'control':45B,96C 'cve':11A,14A 'enabl':8A 'engin':30B,94C 'extern':35B,84C 'host':21B,61B,114C 'ident':52B,88C,103C 'inject':106C 'metadata':37B,47B,86C,98C 'multipl':60B,113C 'neutral':39B,74C 'obtain':55B,108C 'openbao':1A,17B,26B,64C 'packag':18B 'princip':7A,33B,80C 'provid':53B,104C 'render':81C 'secret':29B,93C 'self':20B 'self-host':19B 'ssh':5A,22B,28B,56B,78C,92C,109C 'templat':89C 'token':36B,85C 'typic':48B,99C 'unescap':2A 'unvalid':83C 'user':63B,116C 'valid':58B,111C 'vault':24B 'vault-compat':23B 'via':87C 'wildcard':3A,40B,75C 'without':38B 'x':69C","nicknames":[],"mitigations":[],"who_affected":"Teams running OpenBao with the SSH secrets engine whose roles render certificate principals from identity templates fed by external token metadata. Deployments that do not use the SSH secrets engine, or that do not template principals from token metadata, are less exposed. Exposure also depends on how far the upstream identity provider can be trusted.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["medium","openbao","package","selfhosted","ssh","vaultcompatible"],"campaign_type":null,"search_a":"'-126311':13A,16A '-2026':12A,15A 'broad':9A 'certif':6A,10A 'cve':11A,14A 'enabl':8A 'openbao':1A 'princip':7A 'ssh':5A 'unescap':2A 'wildcard':3A","search_b":"'attack':43B 'build':31B 'certif':32B,57B 'charact':41B 'compat':25B 'compromis':51B 'control':45B 'engin':30B 'extern':35B 'host':21B,61B 'ident':52B 'metadata':37B,47B 'multipl':60B 'neutral':39B 'obtain':55B 'openbao':17B,26B 'packag':18B 'princip':33B 'provid':53B 'secret':29B 'self':20B 'self-host':19B 'ssh':22B,28B,56B 'token':36B 'typic':48B 'user':63B 'valid':58B 'vault':24B 'vault-compat':23B 'wildcard':40B 'without':38B","search_c":"'2.6.5':66C '2.7':68C '2.7.2':71C 'attack':95C 'certif':79C,110C 'charact':76C 'compromis':102C 'control':96C 'engin':94C 'extern':84C 'host':114C 'ident':88C,103C 'inject':106C 'metadata':86C,98C 'multipl':113C 'neutral':74C 'obtain':108C 'openbao':64C 'princip':80C 'provid':104C 'render':81C 'secret':93C 'ssh':78C,92C,109C 'templat':89C 'token':85C 'typic':99C 'unvalid':83C 'user':116C 'valid':111C 'via':87C 'wildcard':75C 'x':69C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-10-26T22:13:33+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-126311","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-126311","severity":null,"published_at":"2026-11-13T10:17:36+00:00","modified_at":"2026-11-13T10:17:36+00:00","first_seen_at":"2026-11-13T10:47:15+00:00","fetched_at":"2026-11-13T10:47:15+00:00","note":null}],"documents":[{"id":144953,"url":"https://github.com/openbao/openbao/security/advisories/GHSA-h76r-48x5-36hg","title":"Vendor advisory: github.com","kind":"vendor","source":"nvd","publisher":"vendor","text":null,"published_at":"2026-10-26T22:13:33+00:00","relation":"advisory","confidence":null,"note":"Vendor advisory: github.com"},{"id":144954,"url":"https://www.vulncheck.com/advisories/openbao-before-2.6.5-and-2.7.2-wildcard-principals-in-ssh-certificates-via-identity-templates","title":"Third-party advisory: www.vulncheck.com","kind":"advisory","source":"nvd","publisher":"research","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":"Third-party advisory: www.vulncheck.com"}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}