~ / search / GHSA-34fc-gh42-pj53

GHSA-34fc-gh42-pj53

OpenBao's Recovery Mode Vulnerable To Token Leakage via Timing Attack

Source: GitHub Advisory Database (reviewed) Critical CVE-2026-63132

Packages

EcosystemPackageAffectedFixed in
Go github.com/openbao/openbao < 0.0.0-20260713141742-763625a20721 0.0.0-20260713141742-763625a20721
Go github.com/openbao/openbao >= 0.1.0, <= 1.1.5 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

### Impact When running in the highly privileged recovery mode, OpenBao was vulnerable to a timing attack against the single recovery token. This allowed an attacker to extract the recovery token and use it to perform operations against the OpenBao instance, including reading or modification of data. ### Patches This has been patched in OpenBao v2.6.0.

References

External links from the advisory. They lead to third-party sites.