What is GHSA-4rj6-p7m7-65jf?

GHSA-4rj6-p7m7-65jf is a security advisory published by GitHub Security Advisories with Medium severity. Vault's ACL policy cache allowed namespace traversal when policy names contained path traversal...

Which CVE IDs does GHSA-4rj6-p7m7-65jf cover?

GHSA-4rj6-p7m7-65jf covers the following CVE IDs: CVE-2026-105820. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-4rj6-p7m7-65jf?

GHSA-4rj6-p7m7-65jf has a CVSS v3 base score of 5.4, published by GitHub Security Advisories.

GHSA-4rj6-p7m7-65jfMediumCVSS 5.4

Vault's ACL policy cache allowed namespace traversal when policy names contained path traversal...

Vendor

GitHub Security Advisories

Published

October 8, 2026

Last Modified

October 8, 2026

🔗 CVE IDs covered (1)

CVE-2026-105820 →

📋 Description

Vault's ACL policy cache allowed namespace traversal when policy names contained path traversal constructs. This may allow a token assigned specially crafted policy names to use the capabilities of policies defined in other namespaces, including the root namespace. This vulnerability (CVE-2026-105820) is fixed in Vault Enterprise 2.1.2, 1.21.12, 1.20.17, and 1.19.23. Vault Community Edition does not support namespaces, and is not affected.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-105820
https://discuss.hashicorp.com/t/hcsec-2026-42-vault-enterprise-acl-policy-cache-vulnerable-to-cross-namespace-policy-resolution/77814
https://github.com/advisories/GHSA-4rj6-p7m7-65jf