GO-2024-3162

Affected Products

Timeline

• Oct 9, 2024 CVE Published
• Feb 4, 2026 CVE Updated
• May 1, 2026 Security Advisory

References

• https://github.com/advisories/GHSA-jg74-mwgw-v6x3 advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-7594 advisory
• https://discuss.hashicorp.com/t/hcsec-2024-20-vault-ssh-secrets-engine-configuration-did-not-restrict-valid-principals-by-default/70251 url