CVE Daily – Hashicorp Consul (High+Critical) https://cvedaily.com/pages/tags/consul.html CVE Daily – Hashicorp Consul (High+Critical) en Wed, 03 Jun 2026 21:26:49 +0000 [High] CVE-2026-27172 – The ConsulRegistry in the camel-consul component (class org.apache.camel.compone... https://nvd.nist.gov/vuln/detail/CVE-2026-27172 https://nvd.nist.gov/vuln/detail/CVE-2026-27172 Mon, 27 Apr 2026 11:16:01 +0000 High CVE-2026-27172

The ConsulRegistry in the camel-consul component (class org.apache.camel.component.consul.ConsulRegistry and its inner ConsulRegistryUtils.deserialize method) read Java-serialized values from the Consul KV store and passed them to ObjectInputStream.readObject() without configuring an ObjectInputFilter. An attacker who can write to the Consul KV store backing a Camel ConsulRegistry instance could…

CVSS: 8.8 · CWE: CWE-502

View on NVD

]]> [Critical] CVE-2025-54469 – A vulnerability was identified in NeuVector, where the enforcer used environment... https://nvd.nist.gov/vuln/detail/CVE-2025-54469 https://nvd.nist.gov/vuln/detail/CVE-2025-54469 Thu, 30 Oct 2025 10:15:34 +0000 Critical CVE-2025-54469

A vulnerability was identified in NeuVector, where the enforcer used environment variables CLUSTER_RPC_PORT and CLUSTER_LAN_PORT to generate a command to be executed via popen, without first sanitising their values. The entry process of the enforcer container is the monitor process. When the enforcer container stops, the monitor process checks whether the consul subprocess has exited. To perf…

CVSS: 9.9 · CWE: CWE-78

View on NVD

]]> [Critical] CVE-2025-48865 – Fabio is an HTTP(S) and TCP router for deploying applications managed by consul... https://nvd.nist.gov/vuln/detail/CVE-2025-48865 https://nvd.nist.gov/vuln/detail/CVE-2025-48865 Fri, 30 May 2025 07:15:23 +0000 Critical CVE-2025-48865

Fabio is an HTTP(S) and TCP router for deploying applications managed by consul. Prior to version 1.6.6, Fabio allows clients to remove X-Forwarded headers (except X-Forwarded-For) due to a vulnerability in how it processes hop-by-hop headers. Fabio adds HTTP headers like X-Forwarded-Host and X-Forwarded-Port when routing requests to backend applications. Since the receiving application should tr…

CVSS: 9.1 · CWE: CWE-345

View on NVD

]]> [High] CVE-2024-10006 – A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such t... https://nvd.nist.gov/vuln/detail/CVE-2024-10006 https://nvd.nist.gov/vuln/detail/CVE-2024-10006 Wed, 30 Oct 2024 22:15:03 +0000 High CVE-2024-10006

A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that using Headers in L7 traffic intentions could bypass HTTP header based access rules.

CVSS: 8.3 · CWE: CWE-644

View on NVD

]]> [High] CVE-2024-10005 – A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such t... https://nvd.nist.gov/vuln/detail/CVE-2024-10005 https://nvd.nist.gov/vuln/detail/CVE-2024-10005 Wed, 30 Oct 2024 22:15:02 +0000 High CVE-2024-10005

A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that using URL paths in L7 traffic intentions could bypass HTTP request path-based access rules.

CVSS: 8.1 · CWE: CWE-22

View on NVD

]]> [High] CVE-2023-3518 – HashiCorp Consul and Consul Enterprise 1.16.0 when using JWT Auth for service me... https://nvd.nist.gov/vuln/detail/CVE-2023-3518 https://nvd.nist.gov/vuln/detail/CVE-2023-3518 Wed, 09 Aug 2023 16:15:09 +0000 High CVE-2023-3518

HashiCorp Consul and Consul Enterprise 1.16.0 when using JWT Auth for service mesh incorrectly allows/denies access regardless of service identities. Fixed in 1.16.1.

CVSS: 7.4 · CWE: CWE-266

View on NVD

]]> [High] CVE-2023-2816 – Consul and Consul Enterprise allowed any user with service:write permissions to ... https://nvd.nist.gov/vuln/detail/CVE-2023-2816 https://nvd.nist.gov/vuln/detail/CVE-2023-2816 Fri, 02 Jun 2023 23:15:09 +0000 High CVE-2023-2816

Consul and Consul Enterprise allowed any user with service:write permissions to use Envoy extensions configured via service-defaults to patch remote proxy instances that target the configured service, regardless of whether the user has permission to modify the service(s) corresponding to those modified proxies.

CVSS: 8.7 · CWE: CWE-266

View on NVD

]]> [High] CVE-2021-41803 – HashiCorp Consul 1.8.1 up to 1.11.8, 1.12.4, and 1.13.1 do not properly validate... https://nvd.nist.gov/vuln/detail/CVE-2021-41803 https://nvd.nist.gov/vuln/detail/CVE-2021-41803 Fri, 23 Sep 2022 01:15:08 +0000 High CVE-2021-41803

HashiCorp Consul 1.8.1 up to 1.11.8, 1.12.4, and 1.13.1 do not properly validate the node or segment names prior to interpolation and usage in JWT claim assertions with the auto config RPC. Fixed in 1.11.9, 1.12.5, and 1.13.2."

CVSS: 7.1 · CWE: CWE-862

View on NVD

]]> [High] CVE-2022-38149 – HashiCorp Consul Template up to 0.27.2, 0.28.2, and 0.29.1 may expose the conten... https://nvd.nist.gov/vuln/detail/CVE-2022-38149 https://nvd.nist.gov/vuln/detail/CVE-2022-38149 Wed, 17 Aug 2022 15:15:08 +0000 High CVE-2022-38149

HashiCorp Consul Template up to 0.27.2, 0.28.2, and 0.29.1 may expose the contents of Vault secrets in the error returned by the *template.Template.Execute method, when given a template using Vault secret contents incorrectly. Fixed in 0.27.3, 0.28.3, and 0.29.2.

CVSS: 7.5 · CWE: CWE-532

View on NVD

]]> [High] CVE-2022-29153 – HashiCorp Consul and Consul Enterprise up to 1.9.16, 1.10.9, and 1.11.4 may allo... https://nvd.nist.gov/vuln/detail/CVE-2022-29153 https://nvd.nist.gov/vuln/detail/CVE-2022-29153 Tue, 19 Apr 2022 16:17:10 +0000 High CVE-2022-29153

HashiCorp Consul and Consul Enterprise up to 1.9.16, 1.10.9, and 1.11.4 may allow server side request forgery when the Consul client agent follows redirects returned by HTTP health check endpoints. Fixed in 1.9.17, 1.10.10, and 1.11.5.

CVSS: 7.5 · CWE: CWE-918

View on NVD

]]> [High] CVE-2021-41805 – HashiCorp Consul Enterprise before 1.8.17, 1.9.x before 1.9.11, and 1.10.x befor... https://nvd.nist.gov/vuln/detail/CVE-2021-41805 https://nvd.nist.gov/vuln/detail/CVE-2021-41805 Sun, 12 Dec 2021 05:15:07 +0000 High CVE-2021-41805

HashiCorp Consul Enterprise before 1.8.17, 1.9.x before 1.9.11, and 1.10.x before 1.10.4 has Incorrect Access Control. An ACL token (with the default operator:write permissions) in one namespace can be used for unintended privilege escalation in a different namespace.

CVSS: 8.8 · CWE: CWE-863

View on NVD

]]> [High] CVE-2021-37219 – HashiCorp Consul and Consul Enterprise 1.10.1 Raft RPC layer allows non-server a... https://nvd.nist.gov/vuln/detail/CVE-2021-37219 https://nvd.nist.gov/vuln/detail/CVE-2021-37219 Tue, 07 Sep 2021 12:15:07 +0000 High CVE-2021-37219

HashiCorp Consul and Consul Enterprise 1.10.1 Raft RPC layer allows non-server agents with a valid certificate signed by the same CA to access server-only functionality, enabling privilege escalation. Fixed in 1.8.15, 1.9.9 and 1.10.2.

CVSS: 8.8 · CWE: CWE-295

View on NVD

]]> [High] CVE-2021-36213 – HashiCorp Consul and Consul Enterprise 1.9.0 through 1.10.0 default deny policy ... https://nvd.nist.gov/vuln/detail/CVE-2021-36213 https://nvd.nist.gov/vuln/detail/CVE-2021-36213 Sat, 17 Jul 2021 18:15:07 +0000 High CVE-2021-36213

HashiCorp Consul and Consul Enterprise 1.9.0 through 1.10.0 default deny policy with a single L7 application-aware intention deny action cancels out, causing the intention to incorrectly fail open, allowing L4 traffic. Fixed in 1.9.8 and 1.10.1.

CVSS: 7.5 · CWE: N/A

View on NVD

]]> [High] CVE-2021-32574 – HashiCorp Consul and Consul Enterprise 1.3.0 through 1.10.0 Envoy proxy TLS conf... https://nvd.nist.gov/vuln/detail/CVE-2021-32574 https://nvd.nist.gov/vuln/detail/CVE-2021-32574 Sat, 17 Jul 2021 18:15:07 +0000 High CVE-2021-32574

HashiCorp Consul and Consul Enterprise 1.3.0 through 1.10.0 Envoy proxy TLS configuration does not validate destination service identity in the encoded subject alternative name. Fixed in 1.8.14, 1.9.8, and 1.10.1.

CVSS: 7.5 · CWE: CWE-295

View on NVD

]]> [High] CVE-2021-28156 – HashiCorp Consul Enterprise version 1.8.0 up to 1.9.4 audit log can be bypassed ... https://nvd.nist.gov/vuln/detail/CVE-2021-28156 https://nvd.nist.gov/vuln/detail/CVE-2021-28156 Tue, 20 Apr 2021 16:15:10 +0000 High CVE-2021-28156

HashiCorp Consul Enterprise version 1.8.0 up to 1.9.4 audit log can be bypassed by specifically crafted HTTP events. Fixed in 1.9.5, and 1.8.10.

CVSS: 7.5 · CWE: N/A

View on NVD

]]> [Critical] CVE-2020-29564 – The official Consul Docker images 0.7.1 through 1.4.2 contain a blank password f... https://nvd.nist.gov/vuln/detail/CVE-2020-29564 https://nvd.nist.gov/vuln/detail/CVE-2020-29564 Tue, 08 Dec 2020 16:15:11 +0000 Critical CVE-2020-29564

The official Consul Docker images 0.7.1 through 1.4.2 contain a blank password for a root user. System using the Consul Docker container deployed by affected versions of the Docker image may allow a remote attacker to achieve root access with a blank password.

CVSS: 9.8 · CWE: N/A

View on NVD

]]> [High] CVE-2020-25201 – HashiCorp Consul Enterprise version 1.7.0 up to 1.8.4 includes a namespace repli... https://nvd.nist.gov/vuln/detail/CVE-2020-25201 https://nvd.nist.gov/vuln/detail/CVE-2020-25201 Wed, 04 Nov 2020 23:15:11 +0000 High CVE-2020-25201

HashiCorp Consul Enterprise version 1.7.0 up to 1.8.4 includes a namespace replication bug which can be triggered to cause denial of service via infinite Raft writes. Fixed in 1.7.9 and 1.8.5.

CVSS: 7.5 · CWE: N/A

View on NVD

]]> [High] CVE-2020-13250 – HashiCorp Consul and Consul Enterprise include an HTTP API (introduced in 1.2.0)... https://nvd.nist.gov/vuln/detail/CVE-2020-13250 https://nvd.nist.gov/vuln/detail/CVE-2020-13250 Thu, 11 Jun 2020 20:15:11 +0000 High CVE-2020-13250

HashiCorp Consul and Consul Enterprise include an HTTP API (introduced in 1.2.0) and DNS (introduced in 1.4.3) caching feature that was vulnerable to denial of service. Fixed in 1.6.6 and 1.7.4.

CVSS: 7.5 · CWE: CWE-770

View on NVD

]]> [High] CVE-2020-13170 – HashiCorp Consul and Consul Enterprise did not appropriately enforce scope for l... https://nvd.nist.gov/vuln/detail/CVE-2020-13170 https://nvd.nist.gov/vuln/detail/CVE-2020-13170 Thu, 11 Jun 2020 20:15:11 +0000 High CVE-2020-13170

HashiCorp Consul and Consul Enterprise did not appropriately enforce scope for local tokens issued by a primary data center, where replication to a secondary data center was not enabled. Introduced in 1.4.0, fixed in 1.6.6 and 1.7.4.

CVSS: 7.5 · CWE: CWE-20

View on NVD

]]> [High] CVE-2020-12758 – HashiCorp Consul and Consul Enterprise could crash when configured with an abnor... https://nvd.nist.gov/vuln/detail/CVE-2020-12758 https://nvd.nist.gov/vuln/detail/CVE-2020-12758 Thu, 11 Jun 2020 20:15:11 +0000 High CVE-2020-12758

HashiCorp Consul and Consul Enterprise could crash when configured with an abnormally-formed service-router entry. Introduced in 1.6.0, fixed in 1.6.6 and 1.7.4.

CVSS: 7.5 · CWE: CWE-404

View on NVD

]]> [High] CVE-2020-7219 – HashiCorp Consul and Consul Enterprise up to 1.6.2 HTTP/RPC services allowed unb... https://nvd.nist.gov/vuln/detail/CVE-2020-7219 https://nvd.nist.gov/vuln/detail/CVE-2020-7219 Fri, 31 Jan 2020 13:15:10 +0000 High CVE-2020-7219

HashiCorp Consul and Consul Enterprise up to 1.6.2 HTTP/RPC services allowed unbounded resource usage, and were susceptible to unauthenticated denial of service. Fixed in 1.6.3.

CVSS: 7.5 · CWE: CWE-770

View on NVD

]]> [Critical] CVE-2019-16377 – The makandra consul gem through 1.0.2 for Ruby has Incorrect Access Control. https://nvd.nist.gov/vuln/detail/CVE-2019-16377 https://nvd.nist.gov/vuln/detail/CVE-2019-16377 Mon, 23 Sep 2019 16:15:15 +0000 Critical CVE-2019-16377

The makandra consul gem through 1.0.2 for Ruby has Incorrect Access Control.

CVSS: 9.8 · CWE: N/A

View on NVD

]]> [High] CVE-2019-12291 – HashiCorp Consul 1.4.0 through 1.5.0 has Incorrect Access Control. Keys not matc... https://nvd.nist.gov/vuln/detail/CVE-2019-12291 https://nvd.nist.gov/vuln/detail/CVE-2019-12291 Thu, 06 Jun 2019 17:29:00 +0000 High CVE-2019-12291

HashiCorp Consul 1.4.0 through 1.5.0 has Incorrect Access Control. Keys not matching a specific ACL rule used for prefix matching in a policy can be deleted by a token using that policy even with default deny settings configured.

CVSS: 7.5 · CWE: N/A

View on NVD

]]> [High] CVE-2019-9764 – HashiCorp Consul 1.4.3 lacks server hostname verification for agent-to-agent TLS... https://nvd.nist.gov/vuln/detail/CVE-2019-9764 https://nvd.nist.gov/vuln/detail/CVE-2019-9764 Tue, 26 Mar 2019 14:29:00 +0000 High CVE-2019-9764

HashiCorp Consul 1.4.3 lacks server hostname verification for agent-to-agent TLS communication. In other words, the product behaves as if verify_server_hostname were set to false, even when it is actually set to true. This is fixed in 1.4.4.

CVSS: 7.4 · CWE: CWE-346

View on NVD

]]> [High] CVE-2019-8336 – HashiCorp Consul (and Consul Enterprise) 1.4.x before 1.4.3 allows a client to b... https://nvd.nist.gov/vuln/detail/CVE-2019-8336 https://nvd.nist.gov/vuln/detail/CVE-2019-8336 Tue, 05 Mar 2019 23:29:02 +0000 High CVE-2019-8336

HashiCorp Consul (and Consul Enterprise) 1.4.x before 1.4.3 allows a client to bypass intended access restrictions and obtain the privileges of one other arbitrary token within secondary datacenters, because a token with literally "" as its secret is used in unusual circumstances.

CVSS: 8.1 · CWE: N/A

View on NVD

]]>