CVE-2026-45808Disclosure

LOWCVSS 7.1 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

OpenBao is an open source identity-based secrets management system. Prior to version 2.5.4, OpenBao's namespaces provide multi-tenant separation. A tenant who intentionally leaks lease identifiers can have their lease and underlying credential revoked or renewed by a user in another tenant via the legacy, undocumented `sys/revoke` and `sys/renew` endpoints. This is fixed in OpenBao v2.5.4.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-863

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

3 mentions across 2 observed days
Momentum state: stable

What's happening

Disclosure: 2 classified signals
General: 1 classified signal
Peaked at 2 mentions on most recent observed day (2026-08-08)
3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d

Signal classification2 categories

Disclosure

266.7%

General

133.3%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-05-28	1	Disclosure1
2026-08-08	2	Disclosure1General1

Full discourse3 posts

Infoflowcloud@infoflowcloud65d
Disclosure
🚨*CVE* CVE-2026-45808 OpenBao is an open source identity-based secrets management system. Prior to version 2.5.4, OpenBao's namespaces provide multi-tenant separation. A tenant who intenti… https://www.cve.org/CVERecord?id=CVE-2026-45808 ----- Traducción: CVE-2026-45808 Ope… http://infoflow.cloud`
Post summary
The post references CVE‑2026‑45808 for OpenBao, noting a pre‑2.5.4 namespace issue, but provides no further technical details, PoC, or exploitation information.
0000042
98 followersView on X
CVE@CVEnew65d
General
CVE-2026-45808 OpenBao is an open source identity-based secrets management system. Prior to version 2.5.4, OpenBao's namespaces provide multi-tenant separation. A tenant who intenti… https://www.cve.org/CVERecord?id=CVE-2026-45808
Post summary
The post references CVE-2026-45808 in OpenBao, noting inadequate tenant isolation before v2.5.4, but provides no further technical detail, exploit availability, or mitigation information.
00000823
57.9K followersView on X
DailyCVE@dailycve136d
Disclosure
🔴 OpenBao, Cross-namespace Lease Revocation, #CVE-2026-45808 (High) -DC-May2026-19 https://dailycve.com/openbao-cross-namespace-lease-revocation-cve-2026-45808-high-dc-may2026-19/
Post summary
The text announces a new CVE (OpenBao Cross‑namespace Lease Revocation) and links to a DailyCVE article, but does not provide PoC, exploit, patch, or detailed vulnerability information.
0000052
207 followersView on X

Explore more

Back to dashboard