{"cve":"CVE-2026-39396","nvd":{"published":"2026-04-21T01:16:06.507","modified":"2026-06-17T10:42:02.940","status":"Analyzed","description":"OpenBao is an open source identity-based secrets management system. Prior to version 2.5.3, `ExtractPluginFromImage()` in OpenBao's OCI plugin downloader extracts a plugin binary from a container image by streaming decompressed tar data via `io.Copy` with no upper bound on the number of bytes written. An attacker who controls or compromises the OCI registry referenced in the victim's configuration can serve a crafted image containing a decompression bomb that decompresses to an arbitrarily large file. The SHA256 integrity check occurs after the full file is written to disk, meaning the hash mismatch is detected only after the damage (disk exhaustion) has already occurred. This allow the attacker to replace **legit plugin image** with no need to change its signature. Version 2.5.3 contains a patch.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","score":6.5},"cwes":["CWE-400","CWE-674","CWE-770"],"references":["https://github.com/openbao/openbao/security/advisories/GHSA-r65v-xgwc-g56j","https://github.com/openbao/openbao/security/advisories/GHSA-r65v-xgwc-g56j"],"products":["openbao:openbao"],"source":"nvd","synced_at":"2026-10-19T22:30:49.762551342+00:00"},"epss":{"cve":"CVE-2026-39396","score":0.00218,"percentile":0.12367,"date":"2026-10-31"},"kev":null,"osv":[{"id":"GHSA-r65v-xgwc-g56j","url":"https://osv.dev/vulnerability/GHSA-r65v-xgwc-g56j","summary":"OpenBao: Decompression Bomb via Unbounded Copy in OCI Plugin Extraction (DoS)","modified":"2026-09-10T03:51:02.911263880Z","packages":[{"ecosystem":"Go","name":"github.com/openbao/openbao","purl":"pkg:golang/github.com/openbao/openbao","ranges":["<0.0.0-20260420180337-2b2a901aa9f7"],"fixed":["0.0.0-20260420180337-2b2a901aa9f7"]}]},{"id":"GO-2026-5609","url":"https://osv.dev/vulnerability/GO-2026-5609","summary":"OpenBao: Decompression Bomb via Unbounded Copy in OCI Plugin Extraction (DoS) in github.com/openbao/openbao","modified":"2026-07-27T09:11:19.263106464Z","packages":[{"ecosystem":"Go","name":"github.com/openbao/openbao","purl":"pkg:golang/github.com/openbao/openbao","ranges":["<0.0.0-20260420180337-2b2a901aa9f7"],"fixed":["0.0.0-20260420180337-2b2a901aa9f7"]}]}],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}