VDB

GO-2024-3162

GO-2024-3162 PUBLISHED

Vault SSH Secrets Engine Configuration Did Not Restrict Valid Principals By Default in github.com/hashicorp/vault

Affected Products

VendorProductVersions
chainguardvault-1.170, 0, 0
github.comhashicorp/vault1.7.7, 1.7.7, 1.7.7

Timeline

  • Oct 9, 2024 CVE Published
  • Jul 27, 2026 CVE Updated
  • Sep 1, 2026 Security Advisory
Open in Interactive Console →
$ Console Community · 100/wk Open console ›