CVE-2026-55776Medium· 6.5▾ TwilightPoC availableOpenBao is an open source identity-based secrets management system. Prior to 2.5.5, an authenticated OpenBao caller with write access to transit/keys/* could terminate the server process by setting derived to true while the type paramete…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 35.8 · likelihood 0.1 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Sep 17.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.5%
Exploit / PoC code exists
0.5% → 0.6%
Last analysed / modified upstream
OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, an authenticated OpenBao caller with write access to transit/keys/* could terminate the server process by setting derived to true while the type parameter selected rsa-, ecdsa-, or ed25519. The Transit policy creation path in builtin/logical/transit/backend.go and sdk/helper/keysutil/policy.go could reach an error path that double-unlocked a mutex while handling this invalid asymmetric derived-key combination, causing a panic, no HTTP response, process exit, and denial of service. JSON and HCL key-creation requests can express the triggering combination. This issue is fixed in version 2.5.5.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Affected packages:
github.com/openbao/openbao >= 0.1.0, <= 2.5.4github.com/openbao/openbao < 0.0.0-20260617104123-db57c62602b2Patched in:
github.com/openbao/openbao 0.0.0-20260617104123-db57c62602b2Source: https://github.com/advisories/GHSA-8w8f-r2xv-4q4j
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-55770Medium· 6.8OpenBao is an open source identity-based secrets management system
CVE-2026-55774Low· 2.1OpenBao is an open source identity-based secrets management system
CVE-2026-55775Low· 2.3OpenBao is an open source identity-based secrets management system
CVE-2026-63132Critical· 9.2OpenBao is an open source identity-based secrets management system
CVE-2026-77285Low· 2.4OpenBao is an open source identity-based secrets management system
CVE-2026-63131Medium· 6.0OpenBao is an open source identity-based secrets management system