OpenBao: Cross-namespace lease revocation/renewal via canonical sys/leases/{revoke,renew} — incomplete fix of CVE-2026-45808

Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.

CVE-2026-55774 · CVE overview and exploitation status

EUVD-2026-78681

GHSA-c36x-h252-g9x2

BIT-openbao-2026-55774

GO-2026-5304

cve-program · CVE-2026-55774

• https://github.com/openbao/openbao/security/advisories/GHSA-c36x-h252-g9x2
• https://github.com/openbao/openbao/pull/3307
• https://github.com/openbao/openbao/pull/3310
• https://github.com/openbao/openbao/commit/9ba1413d793223cca67db12434093a2f25fdc540
• https://github.com/openbao/openbao/commit/b20b999dd4044d7b419a5472d8fe08407828be37
• https://github.com/openbao/openbao/releases/tag/v2.5.5
• https://github.com/openbao/openbao/releases/tag/v2.6.0

euvd · EUVD-2026-78681

• https://github.com/openbao/openbao/security/advisories/GHSA-c36x-h252-g9x2
• https://github.com/openbao/openbao/pull/3307
• https://github.com/openbao/openbao/pull/3310
• https://github.com/openbao/openbao/commit/9ba1413d793223cca67db12434093a2f25fdc540
• https://github.com/openbao/openbao/commit/b20b999dd4044d7b419a5472d8fe08407828be37
• https://github.com/openbao/openbao/releases/tag/v2.5.5
• https://github.com/openbao/openbao/releases/tag/v2.6.0

nvd · CVE-2026-55774

• https://github.com/openbao/openbao/commit/9ba1413d793223cca67db12434093a2f25fdc540
• https://github.com/openbao/openbao/commit/b20b999dd4044d7b419a5472d8fe08407828be37
• https://github.com/openbao/openbao/pull/3307
• https://github.com/openbao/openbao/pull/3310
• https://github.com/openbao/openbao/releases/tag/v2.5.5
• https://github.com/openbao/openbao/releases/tag/v2.6.0
• https://github.com/openbao/openbao/security/advisories/GHSA-c36x-h252-g9x2

osv · GHSA-c36x-h252-g9x2

• https://github.com/openbao/openbao/security/advisories/GHSA-c36x-h252-g9x2
• https://github.com/openbao/openbao/pull/3307
• https://github.com/openbao/openbao/commit/b20b999dd4044d7b419a5472d8fe08407828be37
• https://github.com/openbao/openbao
• https://github.com/openbao/openbao/releases/tag/v2.5.5

osv · GO-2026-5304

• https://github.com/openbao/openbao/security/advisories/GHSA-c36x-h252-g9x2
• https://github.com/openbao/openbao/commit/b20b999dd4044d7b419a5472d8fe08407828be37
• https://github.com/openbao/openbao/pull/3307
• https://github.com/openbao/openbao/releases/tag/v2.5.5

No related changes are available here.