What is GHSA-p45h-4w5c-x9r9?

GHSA-p45h-4w5c-x9r9 is a security advisory published by GitHub Security Advisories with High severity. OpenBao before 2.6.5 and 2.7.x before 2.7.2, and the openbao-plugins LDAP and RADIUS auth plugins...

Which CVE IDs does GHSA-p45h-4w5c-x9r9 cover?

GHSA-p45h-4w5c-x9r9 covers the following CVE IDs: CVE-2026-126312. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-p45h-4w5c-x9r9?

GHSA-p45h-4w5c-x9r9 has a CVSS v3 base score of 7.1, published by GitHub Security Advisories.

GHSA-p45h-4w5c-x9r9HighCVSS 7.1

OpenBao before 2.6.5 and 2.7.x before 2.7.2, and the openbao-plugins LDAP and RADIUS auth plugins...

Vendor

GitHub Security Advisories

Published

November 13, 2026

Last Modified

November 13, 2026

🔗 CVE IDs covered (1)

CVE-2026-126312 →

📋 Description

OpenBao before 2.6.5 and 2.7.x before 2.7.2, and the openbao-plugins LDAP and RADIUS auth plugins before 0.2.0, contain an ACL bypass in the AppRole, Cert, LDAP, and RADIUS auth methods caused by implicit path canonicalization. Authenticated attackers can request non-canonical paths for AppRole Role IDs, Cert CRLs, LDAP groups and users, or RADIUS users to evade ACL deny rules.

🔗 References (4)

https://github.com/openbao/openbao/security/advisories/GHSA-736f-82w7-hj22
https://nvd.nist.gov/vuln/detail/CVE-2026-126312
https://www.vulncheck.com/advisories/openbao-before-2.6.5-and-2.7.2-acl-bypass-via-non-canonical-plugin-paths
https://github.com/advisories/GHSA-p45h-4w5c-x9r9