CVE-2026-115366: OpenBao 2.3.0 before 2.6.3 Missing Root Namespace Enforcement in Plugin Catalog APIs

Q: Which deployments are exposed?

OpenBao deployments from version 2.3.0 before 2.6.3 are affected when privileged tokens exist in child namespaces. The affected plugin catalog API path is /v1/sys/plugins/catalog/*.

Q: What access does an attacker need?

An attacker needs a privileged token for a child namespace and must be able to make requests to the plugin catalog APIs. Exploitation is not described as possible with an unprivileged token.

Q: What could an attacker do with this access?

They can remove existing plugin registrations, create invalid registrations, or register installed plugins through a child namespace sys/ mount. These actions can cause denial of service.

Q: What version resolves the issue?

The issue affects versions before 2.6.3; upgrading to 2.6.3 or later removes the affected version range.

Published Oct 22, 2026

Updated

OpenBao from 2.3.0 before 2.6.3 contains an improper authorization vulnerability that allows privileged child-namespace tokens to modify plugin registrations because /v1/sys/plugins/catalog/ is not restricted to the root namespace. Attackers can remove existing registrations, create invalid ones, or register installed plugins through a child namespace's sys/ mount, causing denial of service.

Affected Software

1 affected component

OpenBao OpenBao>=2.3.0<2.6.3

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade OpenBao to a version that resolves this vulnerability.
Fixed in 2.6.3

Event History

Oct 22, 2026

CVE Published

via MITRE·07:13 PM

Data Sourced

via MITRE·07:13 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployments are exposed?

OpenBao deployments from version 2.3.0 before 2.6.3 are affected when privileged tokens exist in child namespaces. The affected plugin catalog API path is /v1/sys/plugins/catalog/*.

What access does an attacker need?

An attacker needs a privileged token for a child namespace and must be able to make requests to the plugin catalog APIs. Exploitation is not described as possible with an unprivileged token.

What could an attacker do with this access?

They can remove existing plugin registrations, create invalid registrations, or register installed plugins through a child namespace sys/ mount. These actions can cause denial of service.

What version resolves the issue?

The issue affects versions before 2.6.3; upgrading to 2.6.3 or later removes the affected version range.

CVE-2026-115366: OpenBao 2.3.0 before 2.6.3 Missing Root Namespace Enforcement in Plugin Catalog APIs

Affected Software

Remediation

Event History

Frequently Asked Questions

Which deployments are exposed?

What access does an attacker need?

What could an attacker do with this access?

What version resolves the issue?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are exposed?

What access does an attacker need?

What could an attacker do with this access?

What version resolves the issue?