Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2026-89322

Vault ACL Policy Evaluation May Allow Bypass of Deny Restrictions

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
HashiCorp

Description

Vault and Vault Enterprise did not consistently evaluate ACL policies against the canonical form of resource and policy names. This may allow an authenticated user with delegated permissions to bypass an explicit deny restriction and access a protected resource or assign a denied policy, potentially leading to privilege escalation. This vulnerability (CVE-2026-89322) is fixed in Vault Community Edition 2.1.2, and Vault Enterprise 2.1.2, 1.21.12, 1.20.17, and 1.19.23.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HashiCorp Vault

Default version status: unaffected

  • 0.0.1 to < 2.1.2affected

HashiCorp Vault Enterprise

Default version status: unaffected

  • 0.0.1 to < 2.1.2affected

References