CVE-2026-3605Published

An authenticated user with access to a kvv2 path through a policy containing a glob may be able to delete secrets they were not authorized to read or write, resulting in denial-of-service. This vulnerability did not allow a malicious user t…

Exact source revision recorded 27 Oct 2026 10:09:38 UTC. It does not establish the source's current position. Latest evidence.

Recorded JSON

Immutable source observations

2 recorded revisions

Each citation identifies one complete source statement. Source modification dates and the time this installation observed them are distinct. Latest history includes records historically associated by source identifiers; a removed alias is not a current equivalence claim. Exact citations show that source record's own earlier observations. Failed reads and unchanged polls do not rewrite history.

27 Oct 2026 10:09:38 UTC

An authenticated user with access to a kvv2 path through a policy containing a glob may be able to delete secrets they were not authorized to read or write, resulting in denial-of-service. This vulnerability did not allow a malicious user t…

nvd · CVE-2026-3605 · Published

25 Oct 2026 09:17:18 UTC

An authenticated user with access to a kvv2 path through a policy containing a glob may be able to delete secrets they were not authorized to read or write, resulting in denial-of-service. This vulnerability did not allow a malicious user t…

nvd · CVE-2026-3605 · Published

This citation shows only its exact record and strictly earlier observation times. Open complete latest history.