CVE-2026-115804: Consul vulnerable to an authorization bypass in health check registration

Q: Who can exploit this issue?

An authenticated user can exploit it if they can register or modify health checks on a node where another service's health checks are present. The described impact is limited to modifying health checks belonging to another service on the same node.

Q: Which releases contain the fix?

The issue is fixed in Consul Community Edition 2.1.0, and in Consul Enterprise 2.1.0 and 1.21.19.

Published Oct 26, 2026

Updated

HashiCorp Consul and Consul Enterprise are vulnerable to an authorization bypass in health check registration that may allow an authenticated user to modify health checks belonging to another service on the same node. This vulnerability (CVE-2026-115804) is fixed in Consul Community Edition 2.1.0 and Consul Enterprise 2.1.0 and 1.21.19.

Affected Software

2 affected components

HashiCorp Consul Community Edition<2.1.0

HashiCorp Consul Enterprise<2.1.0, <1.21.19

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade HashiCorp Consul Community Edition to a version that resolves this vulnerability.
Fixed in 2.1.0
Upgrade
Upgrade HashiCorp Consul Enterprise to a version that resolves this vulnerability.
Fixed in 2.1.0
Upgrade
Upgrade HashiCorp Consul Enterprise to a version that resolves this vulnerability.
Fixed in 1.21.19

Event History

Oct 26, 2026

CVE Published

via MITRE·06:09 PM

Data Sourced

via MITRE·06:09 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

An authenticated user can exploit it if they can register or modify health checks on a node where another service's health checks are present. The described impact is limited to modifying health checks belonging to another service on the same node.

Which releases contain the fix?