Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2026-7776

Boundary Workers Vulnerable to Denial of Service During TLS Handshake

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
HashiCorp

Description

Boundary Community Edition and Boundary Enterprise (“Boundary”) workers are vulnerable to a denial-of-service condition during node enrollment TLS handshakes. An attacker with network access to the worker authentication listener may open a connection and delay or withhold the client certificate during the TLS handshake, causing worker connection handling to block. This may prevent legitimate worker connections from being accepted or routed. This vulnerability, CVE-2026-7776, is fixed in Boundary 0.21.3, 0.20.3, 0.19.5.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HashiCorp Boundary

Default version status: unaffected

  • 0.9.0 to < 0.21.3affected

HashiCorp Boundary Enterprise

Default version status: unaffected

  • 0.9.0 to < 0.21.3affected

References