Boundary vulnerabilities

CVEs whose affected-version data names the Boundary package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-13303High· 8.7

1w ago

Boundary vulnerable to server-side request forgery in Vault credential store

HashiCorp Boundary and Boundary Enterprise are vulnerable to a server-side request forgery in the Vault credential store integration that may allow an authenticated user with permission to manage credential stores and credential librarie…

▾ TwilightHashiCorp · BoundaryEPSS 0.22%via CVEORG