HashiCorp
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 337 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from August 2, 2017 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →[CVE-2026-8715] HashiCorp Vault Sects Operator 1.3.0-1.4.1: tenant-controlled sectIDPath leaks operator ServiceAccount token (path to cluster-admin)
Vault Vulnerable to Privilege Escalation via Slash Injection in Templated Policy Paths
Unicode normalization mismatch in go-slug ignore pattern matching may bypass intended file exclusions
Packer vulnerable to arbitrary file write via crafted plugin archive during installation
Vault Secrets Operator vulnerable to arbitrary file read and credential exfiltration via AppRole secretIDPath
Vault Enterprise vulnerable to cross-namespace entity deletion
Vault vulnerable to LIST authorization bypass via trailing-slash strip
Unauthenticated denial of service via unbounded request body processing
L7 intention authorization bypass via custom public listener
Monitor HashiCorp in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.