CVE-2026-55774Published
OpenBao: Cross-namespace lease revocation/renewal via canonical sys/leases/{revoke,renew} — incomplete fix of CVE-2026-45808
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-55774 · Microsoft / collected KEV context
cve-program · CVE-2026-55774
- https://github.com/openbao/openbao/security/advisories/GHSA-c36x-h252-g9x2
- https://github.com/openbao/openbao/pull/3307
- https://github.com/openbao/openbao/pull/3310
- https://github.com/openbao/openbao/commit/9ba1413d793223cca67db12434093a2f25fdc540
- https://github.com/openbao/openbao/commit/b20b999dd4044d7b419a5472d8fe08407828be37
- https://github.com/openbao/openbao/releases/tag/v2.5.5
- https://github.com/openbao/openbao/releases/tag/v2.6.0
euvd · EUVD-2026-78681
- https://github.com/openbao/openbao/security/advisories/GHSA-c36x-h252-g9x2
- https://github.com/openbao/openbao/pull/3307
- https://github.com/openbao/openbao/pull/3310
- https://github.com/openbao/openbao/commit/9ba1413d793223cca67db12434093a2f25fdc540
- https://github.com/openbao/openbao/commit/b20b999dd4044d7b419a5472d8fe08407828be37
- https://github.com/openbao/openbao/releases/tag/v2.5.5
- https://github.com/openbao/openbao/releases/tag/v2.6.0
nvd · CVE-2026-55774
- https://github.com/openbao/openbao/commit/9ba1413d793223cca67db12434093a2f25fdc540
- https://github.com/openbao/openbao/commit/b20b999dd4044d7b419a5472d8fe08407828be37
- https://github.com/openbao/openbao/pull/3307
- https://github.com/openbao/openbao/pull/3310
- https://github.com/openbao/openbao/releases/tag/v2.5.5
- https://github.com/openbao/openbao/releases/tag/v2.6.0
- https://github.com/openbao/openbao/security/advisories/GHSA-c36x-h252-g9x2
osv · GHSA-c36x-h252-g9x2
- https://github.com/openbao/openbao/security/advisories/GHSA-c36x-h252-g9x2
- https://github.com/openbao/openbao/pull/3307
- https://github.com/openbao/openbao/commit/b20b999dd4044d7b419a5472d8fe08407828be37
- https://github.com/openbao/openbao
- https://github.com/openbao/openbao/releases/tag/v2.5.5
osv · GO-2026-5304
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.