---
id: CVE-2026-115804
title: Consul vulnerable to an authorization bypass in health check registration
summary: >-
  HashiCorp Consul and Consul Enterprise are vulnerable to an authorization
  bypass in health check registration that may allow an authenticated user to
  modify health checks belonging to another service on the same node. This
  vulnerability …
severity: medium
cvss: 6.4
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L'
cvssSource: cna
cwe:
  - CWE-639
vendor: HashiCorp
product: Consul
affected:
  - Consul >= 0.7.2 < 2.1.0
  - consul_enterprise >= 0.7.2 < 2.1.0
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-10-26T18:53:55.561242Z'
published: '2026-10-26'
updated: '2026-10-26'
sourceUpdated: '2026-10-26T19:38:28.416Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-115804'
references:
  - url: >-
      https://discuss.hashicorp.com/t/hcsec-2026-49-consul-vulnerable-to-an-authorization-bypass-in-health-check-registration/77914
tags:
  - cve.org
ingestedAt: '2026-10-26T18:35:51.488Z'
epss: 0.0029
epssPercentile: 0.21448
---

## Overview

HashiCorp Consul and Consul Enterprise are vulnerable to an authorization bypass in health check registration that may allow an authenticated user to modify health checks belonging to another service on the same node. This vulnerability (CVE-2026-115804) is fixed in Consul Community Edition 2.1.0 and Consul Enterprise 2.1.0 and 1.21.19.

## Affected

- `Consul >= 0.7.2 < 2.1.0`
- `consul_enterprise >= 0.7.2 < 2.1.0`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.