CVE-2026-13303: Boundary vulnerable to server-side request forgery in Vault credential store
HashiCorp Boundary and Boundary Enterprise are vulnerable to a server-side request forgery in the Vault credential store integration that may allow an authenticated user with permission to manage credential stores and credential libraries within a project to cause the Boundary controller to issue outbound requests to a network destination of the requester's choosing and to receive the response. This may expose endpoints reachable only from the controller's host, such as a cloud instance metadata service. This vulnerability, CVE-2026-13303, is fixed in Boundary Enterprise 1.0.2 and 0.21.6.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
HashiCorp Boundary Enterpriseto a version that resolves this vulnerability.Fixed in 1.0.2 - Upgrade
Upgrade
HashiCorp Boundary Enterpriseto a version that resolves this vulnerability.Fixed in 0.21.6
Event History
Frequently Asked Questions
Who can exploit this issue?
An authenticated Boundary user must have permission to manage credential stores and credential libraries within a project. The issue is not described as exploitable by unauthenticated users.
What systems are at risk from a successful exploit?
Network endpoints reachable from the Boundary controller host may be exposed because the controller can be induced to make outbound requests and return their responses. This can include services not otherwise externally accessible, such as a cloud instance metadata service.
What should be done if immediate patching is not possible?
Restrict permission to manage credential stores and credential libraries within projects to only highly trusted users. Limit the Boundary controller's outbound network access, particularly access to internal-only services and cloud metadata endpoints.
Which releases contain the fix?
The vulnerability is fixed in Boundary Enterprise 1.0.2 and 0.21.6.