Skip to content
CVE PROGRAM SOURCE RECORD7.7 High

CVE-2026-87993

Consul-template vulnerable to an information disclosure issue in error handling

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
HashiCorp

Description

The consul-template library is vulnerable to an information disclosure issue in its error handling path that may allow Vault secret values to appear in template error messages, log output, and downstream surfaces such as Nomad task events. This vulnerability (CVE-2026-87993) is fixed in consul-template 0.43.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HashiCorp Tooling

Default version status: unaffected

  • 0.27.2 to < 0.43.0affected

References