What is GHSA-9vq3-c4rf-pm8v?

GHSA-9vq3-c4rf-pm8v is a security advisory published by GitHub Security Advisories with Medium severity. HashiCorp Consul and Consul Enterprise are vulnerable to an authorization bypass in health check...

Which CVE IDs does GHSA-9vq3-c4rf-pm8v cover?

GHSA-9vq3-c4rf-pm8v covers the following CVE IDs: CVE-2026-115804. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-9vq3-c4rf-pm8v?

GHSA-9vq3-c4rf-pm8v has a CVSS v3 base score of 6.4, published by GitHub Security Advisories.

GHSA-9vq3-c4rf-pm8vMediumCVSS 6.4

HashiCorp Consul and Consul Enterprise are vulnerable to an authorization bypass in health check...

Vendor

GitHub Security Advisories

Published

October 26, 2026

Last Modified

October 26, 2026

🔗 CVE IDs covered (1)

CVE-2026-115804 →

📋 Description

HashiCorp Consul and Consul Enterprise are vulnerable to an authorization bypass in health check registration that may allow an authenticated user to modify health checks belonging to another service on the same node. This vulnerability (CVE-2026-115804) is fixed in Consul Community Edition 2.1.0 and Consul Enterprise 2.1.0 and 1.21.19.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-115804
https://discuss.hashicorp.com/t/hcsec-2026-49-consul-vulnerable-to-an-authorization-bypass-in-health-check-registration/77914
https://github.com/advisories/GHSA-9vq3-c4rf-pm8v