Hashicorp Consul Enterprise vulnerabilities

CVE-2024-10086 [MEDIUM] CWE-79 CVE-2024-10086: A vulnerability was identified in Consul and Consul Enterprise such that the server response did not A vulnerability was identified in Consul and Consul Enterprise such that the server response did not explicitly set a Content-Type HTTP header, allowing user-provided inputs to be misinterpreted and lead to reflected XSS.

CVE-2026-15970 [MEDIUM] CWE-647 CVE-2026-15970: Consul Community Edition and Consul Enterprise 1.20.1 through 2.0.2 are vulnerable to an L7 intentio Consul Community Edition and Consul Enterprise 1.20.1 through 2.0.2 are vulnerable to an L7 intention authorization bypass when a service proxy is configured with a custom public listener. An authenticated mesh workload may reach HTTP paths that are blocked by a path-based deny intention. This vulnerability, CVE-2026-15970, is fixed in Consul 2.0.3

CVE-2026-19014 [MEDIUM] CWE-770 CVE-2026-19014: Consul Community Edition and Consul Enterprise 1.17.0 through 2.0.2 are vulnerable to an uncontrolle Consul Community Edition and Consul Enterprise 1.17.0 through 2.0.2 are vulnerable to an uncontrolled resource consumption issue in the Connect authorization endpoint that may allow a caller to grow the agent's intention-match cache without bound, defeating the operator's cache-disable configuration. This vulnerability, CVE-2026-190124, is fixed in

CVE-2026-105608 [HIGH] CWE-178 CVE-2026-105608: HashiCorp Consul and Consul Enterprise are vulnerable to an authorization bypass in service mesh pro HashiCorp Consul and Consul Enterprise are vulnerable to an authorization bypass in service mesh proxy registration. This may allow a user with service write permission to apply Envoy escape-hatch configuration without the required mesh write permission. This vulnerability (CVE-2026-105608) is fixed in Consul Community Edition 2.1.0 and Consul Enter

CVE-2026-105765 [HIGH] CWE-862 CVE-2026-105765: HashiCorp Consul and Consul Enterprise 1.17.0 up to 2.0.4 are vulnerable to an authorization bypass HashiCorp Consul and Consul Enterprise 1.17.0 up to 2.0.4 are vulnerable to an authorization bypass in the agent's service mesh leaf certificate API that may allow an attacker without a valid ACL token to retrieve a cached service leaf certificate and its private key. This vulnerability (CVE-2026-105765) is fixed in Consul Community Edition 2.1.0 and

CVE-2026-105626 [HIGH] CWE-770 CVE-2026-105626: HashiCorp Consul and Consul Enterprise are vulnerable to a denial of service in the HTTP API that ma HashiCorp Consul and Consul Enterprise are vulnerable to a denial of service in the HTTP API that may allow an unauthenticated attacker to exhaust memory on a Consul agent. This vulnerability (CVE-2026-105626) is fixed in Consul Community Edition 2.1.0 and Consul Enterprise 2.1.0 and 1.21.19.

CVE-2026-115804 [MEDIUM] CWE-639 CVE-2026-115804: HashiCorp Consul and Consul Enterprise are vulnerable to an authorization bypass in health check reg HashiCorp Consul and Consul Enterprise are vulnerable to an authorization bypass in health check registration that may allow an authenticated user to modify health checks belonging to another service on the same node. This vulnerability (CVE-2026-115804) is fixed in Consul Community Edition 2.1.0 and Consul Enterprise 2.1.0 and 1.21.19.