Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2026-39946

Опубликовано: 21 апр. 2026
Источник: redhat
CVSS3: 4.9
EPSS Низкий

Описание

OpenBao is an open source identity-based secrets management system. Prior to version 2.5.3, when OpenBao revoked privileges on a role in the PostgreSQL database secrets engine, OpenBao failed to use proper database quoting on schema names provided by PostgreSQL. This could lead to role revocation failures, or more rarely, SQL injection as the management user. This vulnerability was original from HashiCorp Vault. The vulnerability is addressed in v2.5.3. As a workaround, audit table schemas and ensure database users cannot create new schemas and grant privileges on them.

A flaw was found in OpenBao. When OpenBao revoked privileges on a role in the PostgreSQL database secrets engine, it failed to use proper database quoting on schema names. This oversight could lead to role revocation failures or, in rarer instances, allow a management user to perform SQL injection.

Меры по смягчению последствий

To mitigate this issue, audit table schemas within the PostgreSQL database used by OpenBao. Ensure that database users are restricted from creating new schemas and granting privileges on them. This operational control helps prevent the conditions that could lead to SQL injection during role privilege revocation. A restart or service reload of OpenBao may be required for these changes to take full effect.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Cryostat 4cryostat/cryostat-storage-rhel9Not affected

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-89
https://bugzilla.redhat.com/show_bug.cgi?id=2459953OpenBao: OpenBao: SQL injection via improper database quoting during PostgreSQL role revocation

EPSS

Процентиль: 15%
0.00235
Низкий

4.9 Medium

CVSS3

Связанные уязвимости

CVSS3: 4.9
nvd
3 месяца назад

OpenBao is an open source identity-based secrets management system. Prior to version 2.5.3, when OpenBao revoked privileges on a role in the PostgreSQL database secrets engine, OpenBao failed to use proper database quoting on schema names provided by PostgreSQL. This could lead to role revocation failures, or more rarely, SQL injection as the management user. This vulnerability was original from HashiCorp Vault. The vulnerability is addressed in v2.5.3. As a workaround, audit table schemas and ensure database users cannot create new schemas and grant privileges on them.

CVSS3: 4.9
debian
3 месяца назад

OpenBao is an open source identity-based secrets management system. Pr ...

CVSS3: 4.9
github
3 месяца назад

OpenBao's SQL Injection in PostgreSQL database secrets engine

CVSS3: 4.9
fstec
3 месяца назад

Уязвимость системы управления секретами и шифрованием OpenBao, связанная с непринятием мер по защите структуры запроса SQL, позволяющая нарушителю выполнить произвольный код

redos
2 месяца назад

Уязвимость openbao

EPSS

Процентиль: 15%
0.00235
Низкий

4.9 Medium

CVSS3