GO-2026-4862

vendorUSosv

OpenBao has Reflected XSS in its OIDC authentication error message in github.com/openbao/openbao

view advisory published 2026-03-26Licence: per source

OpenBao has Reflected XSS in its OIDC authentication error message in github.com/openbao/openbao

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2026-33758USmedium6.1—
OpenBao is an open source identity-based secrets management system. Prior to version 2.5.2, OpenBao installations that have an OIDC/JWT authentication method enabled and a role wit…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan