OpenBao Agent Writes Secrets to Stdout

Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.

CVE-2026-77285 · CVE overview and exploitation status

EUVD-2026-85518

GHSA-444v-8vxr-p36h

BIT-openbao-2026-77285

GO-2026-6554

cve-program · CVE-2026-77285

• https://github.com/openbao/openbao/security/advisories/GHSA-444v-8vxr-p36h
• https://github.com/openbao/openbao/pull/3494
• https://github.com/openbao/openbao/pull/3495
• https://github.com/openbao/openbao/commit/90272575e5f58b3883fbb0ccb2238e9285722d1a
• https://github.com/openbao/openbao/commit/ee3aa4aff72c5176cf02af21eac7158899080878
• https://github.com/openbao/openbao/releases/tag/v2.6.0

euvd · EUVD-2026-85518

• https://github.com/openbao/openbao/security/advisories/GHSA-444v-8vxr-p36h
• https://github.com/openbao/openbao/pull/3494
• https://github.com/openbao/openbao/pull/3495
• https://github.com/openbao/openbao/commit/90272575e5f58b3883fbb0ccb2238e9285722d1a
• https://github.com/openbao/openbao/commit/ee3aa4aff72c5176cf02af21eac7158899080878
• https://github.com/openbao/openbao/releases/tag/v2.6.0

nvd · CVE-2026-77285

• https://github.com/openbao/openbao/commit/90272575e5f58b3883fbb0ccb2238e9285722d1a
• https://github.com/openbao/openbao/commit/ee3aa4aff72c5176cf02af21eac7158899080878
• https://github.com/openbao/openbao/pull/3494
• https://github.com/openbao/openbao/pull/3495
• https://github.com/openbao/openbao/releases/tag/v2.6.0
• https://github.com/openbao/openbao/security/advisories/GHSA-444v-8vxr-p36h

osv · GHSA-444v-8vxr-p36h

• https://github.com/openbao/openbao/security/advisories/GHSA-444v-8vxr-p36h
• https://github.com/openbao/openbao/pull/3494
• https://github.com/openbao/openbao/pull/3495
• https://github.com/openbao/openbao/commit/90272575e5f58b3883fbb0ccb2238e9285722d1a
• https://github.com/openbao/openbao/commit/ee3aa4aff72c5176cf02af21eac7158899080878
• https://github.com/openbao/openbao
• https://github.com/openbao/openbao/releases/tag/v2.6.0

osv · GO-2026-6554

• https://github.com/openbao/openbao/security/advisories/GHSA-444v-8vxr-p36h
• https://github.com/openbao/openbao/commit/90272575e5f58b3883fbb0ccb2238e9285722d1a
• https://github.com/openbao/openbao/commit/ee3aa4aff72c5176cf02af21eac7158899080878
• https://github.com/openbao/openbao/pull/3494
• https://github.com/openbao/openbao/pull/3495
• https://github.com/openbao/openbao/releases/tag/v2.6.0

No related changes are available here.