Hashicorp Tooling vulnerabilities

CVE-2026-16326 [CRITICAL] CWE-488 CVE-2026-16326: In consul-mcp-server, versions 0.1.0 up to 0.1.3 did not properly isolate session state in stateless In consul-mcp-server, versions 0.1.0 up to 0.1.3 did not properly isolate session state in stateless mode, which may allow one client's Consul authentication token to be used for subsequent requests from other clients. This vulnerability (CVE-2026-16326) is fixed in consul-mcp-server 0.1.4.

CVE-2025-13357 [CRITICAL] CWE-1188 CVE-2025-13357: Vault’s Terraform Provider incorrectly set the default deny_null_bind parameter for the LDAP auth me Vault’s Terraform Provider incorrectly set the default deny_null_bind parameter for the LDAP auth method to false by default, potentially resulting in an insecure configuration. If the underlying LDAP server allowed anonymous or unauthenticated binds, this could result in authentication bypass. This vulnerability, CVE-2025-13357, is fixed in Vaul

CVE-2026-16498 [CRITICAL] CWE-488 CVE-2026-16498: The terraform-mcp-server before version 1.1.0 is vulnerable to a cross-tenant credential reuse issue The terraform-mcp-server before version 1.1.0 is vulnerable to a cross-tenant credential reuse issue in the streamable-HTTP stateless transport mode that may allow one user's Terraform token to be used to execute tool calls on behalf of subsequent users. This vulnerability, CVE-2026-16498, is fixed in terraform-mcp-server 1.1.0.

CVE-2026-14869 [HIGH] CWE-918 CVE-2026-14869: The terraform-mcp-server before version 1.1.0 is vulnerable to a server-side request forgery issue i The terraform-mcp-server before version 1.1.0 is vulnerable to a server-side request forgery issue in the streamable-HTTP transport that may allow an unauthenticated remote client to redirect the server's Terraform API requests, and the server-side authorization token, to an attacker-controlled endpoint. This vulnerability, CVE-2026-14869, is fixed in

CVE-2026-8715 [CRITICAL] CWE-552 CVE-2026-8715: Vault Secrets Operator 1.3.0 up to 1.4.1 is vulnerable to an arbitrary file read and credential exfi Vault Secrets Operator 1.3.0 up to 1.4.1 is vulnerable to an arbitrary file read and credential exfiltration issue in the AppRole authentication configuration that may allow a tenant with limited Kubernetes RBAC permissions to read files from the operator pod's filesystem and transmit their contents to a tenant-controlled endpoint, potentially leadi

CVE-2026-16496 [HIGH] CWE-384 CVE-2026-16496: The terraform-mcp-server before version 1.1.0 is vulnerable to an authorization bypass in the stream The terraform-mcp-server before version 1.1.0 is vulnerable to an authorization bypass in the streamable-HTTP stateful transport mode that may allow a user who obtains another user's MCP session ID to have their tool calls executed using that user's Terraform credentials. This vulnerability, CVE-2026-16496, is fixed in terraform-mcp-server 1.1.0.

CVE-2026-16328 [HIGH] CWE-918 CVE-2026-16328: In consul-mcp-server, versions 0.1.0 up to 0.1.3 did not restrict how the Consul backend address was In consul-mcp-server, versions 0.1.0 up to 0.1.3 did not restrict how the Consul backend address was supplied, allowing a connected client to override the server's configured Consul address via a request header. This may allow a malicious client to redirect the server's Consul API traffic to an attacker-controlled endpoint, potentially exfiltrating th

CVE-2025-1293 [HIGH] CWE-1390 CVE-2025-1293: Hermes versions up to 0.4.0 improperly validated the JWT provided when using the AWS ALB authenticat Hermes versions up to 0.4.0 improperly validated the JWT provided when using the AWS ALB authentication mode, potentially allowing for authentication bypass. This vulnerability, CVE-2025-1293, was fixed in Hermes 0.5.0.

CVE-2026-4660 [HIGH] CWE-200 CVE-2026-4660: HashiCorp’s go-getter library up to v1.8.5 may allow arbitrary file reads on the file system during HashiCorp’s go-getter library up to v1.8.5 may allow arbitrary file reads on the file system during certain git operations through a maliciously crafted URL. This vulnerability, CVE-2026-4660, is fixed in go-getter v1.8.6. This vulnerability does not affect the go-getter/v2 branch and package.

CVE-2026-87993 [HIGH] CWE-532 CVE-2026-87993: The consul-template library is vulnerable to an information disclosure issue in its error handling p The consul-template library is vulnerable to an information disclosure issue in its error handling path that may allow Vault secret values to appear in template error messages, log output, and downstream surfaces such as Nomad task events. This vulnerability (CVE-2026-87993) is fixed in consul-template 0.43.0.

CVE-2026-5061 [MEDIUM] CWE-59 CVE-2026-5061: The consul-template library before version 0.42.0 is vulnerable to a sandbox path bypass in the file The consul-template library before version 0.42.0 is vulnerable to a sandbox path bypass in the file template helper that may allow reading an out-of-sandbox file. This vulnerability (CVE-2026-5061) is fixed in consul-template 0.42.0.

CVE-2026-14361 [MEDIUM] CWE-59 CVE-2026-14361: The consul-template library before version 0.42.1 is vulnerable to a path redirection issue in the w The consul-template library before version 0.42.1 is vulnerable to a path redirection issue in the writeToFile template helper that may allow template output to be written outside the intended directory or to overwrite an existing file. This vulnerability (CVE-2026-14361) is fixed in consul-template 0.42.1.