CVE-2026-5051

4.4 mediumEPSS 0.4%

Medium (4.4). EPSS 0.4% chance of exploitation in the next 30 days.

HashiCorp Vault and Vault Enterprise prior to 2.0.1 audit device validation logic did not consistently apply plugin directory protections when the legacy file audit path option was used. This vulnerability (CVE-2026-5051) is fixed in 2.0.1, 1.21.6, 1.20.11, and 1.19.17.

Severity

CVSS 3.1

4.4 medium

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 32% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2026-07-01
Modified: 2026-07-02
Record from: the NVD, synced 2026-10-19

References

https://discuss.hashicorp.com/t/hcsec-2026-16-vault-audit-device-plugin-directory-guard-bypass-via-legacy-path-option/77536

Check your stack JSON