OpenBao Agent Writes Secrets to Stdout

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-77285 · Microsoft / collected KEV context

EUVD-2026-85518

GHSA-444v-8vxr-p36h

BIT-openbao-2026-77285

GO-2026-6554

cve-program · CVE-2026-77285

• https://github.com/openbao/openbao/security/advisories/GHSA-444v-8vxr-p36h
• https://github.com/openbao/openbao/pull/3494
• https://github.com/openbao/openbao/pull/3495
• https://github.com/openbao/openbao/commit/90272575e5f58b3883fbb0ccb2238e9285722d1a
• https://github.com/openbao/openbao/commit/ee3aa4aff72c5176cf02af21eac7158899080878
• https://github.com/openbao/openbao/releases/tag/v2.6.0

euvd · EUVD-2026-85518

• https://github.com/openbao/openbao/security/advisories/GHSA-444v-8vxr-p36h
• https://github.com/openbao/openbao/pull/3494
• https://github.com/openbao/openbao/pull/3495
• https://github.com/openbao/openbao/commit/90272575e5f58b3883fbb0ccb2238e9285722d1a
• https://github.com/openbao/openbao/commit/ee3aa4aff72c5176cf02af21eac7158899080878
• https://github.com/openbao/openbao/releases/tag/v2.6.0

nvd · CVE-2026-77285

• https://github.com/openbao/openbao/commit/90272575e5f58b3883fbb0ccb2238e9285722d1a
• https://github.com/openbao/openbao/commit/ee3aa4aff72c5176cf02af21eac7158899080878
• https://github.com/openbao/openbao/pull/3494
• https://github.com/openbao/openbao/pull/3495
• https://github.com/openbao/openbao/releases/tag/v2.6.0
• https://github.com/openbao/openbao/security/advisories/GHSA-444v-8vxr-p36h

osv · GHSA-444v-8vxr-p36h

• https://github.com/openbao/openbao/security/advisories/GHSA-444v-8vxr-p36h
• https://github.com/openbao/openbao/pull/3494
• https://github.com/openbao/openbao/pull/3495
• https://github.com/openbao/openbao/commit/90272575e5f58b3883fbb0ccb2238e9285722d1a
• https://github.com/openbao/openbao/commit/ee3aa4aff72c5176cf02af21eac7158899080878
• https://github.com/openbao/openbao
• https://github.com/openbao/openbao/releases/tag/v2.6.0

osv · GO-2026-6554

• https://github.com/openbao/openbao/security/advisories/GHSA-444v-8vxr-p36h
• https://github.com/openbao/openbao/commit/90272575e5f58b3883fbb0ccb2238e9285722d1a
• https://github.com/openbao/openbao/commit/ee3aa4aff72c5176cf02af21eac7158899080878
• https://github.com/openbao/openbao/pull/3494
• https://github.com/openbao/openbao/pull/3495
• https://github.com/openbao/openbao/releases/tag/v2.6.0

No related operational record is retained in the current change model.