GO-2026-4690

vendorUSosv

Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul

view advisory published 2026-03-16Licence: per source

Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2026-2808US——
HashiCorp Consul and Consul Enterprise 1.18.20 up to 1.21.10 and 1.22.4 are vulnerable to arbitrary file read when configured with Kubernetes authentication. This vulnerability, CV…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan