Exploitation ongoing with high activity in latest observed window (1 mentions)
Recommended action window: Immediate (within 24h)
NVD description
HashiCorp Vault and Vault Enterprise prior to 2.0.1 audit device validation logic did not consistently apply plugin directory protections when the legacy file audit path option was used. This vulnerability (CVE-2026-5051) is fixed in 2.0.1, 1.21.6, 1.20.11, and 1.19.17.
Priority
LOW
Exploitation
ACTIVE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-07-01 | 2 | Disclosure2 |
| 2026-07-02 | 1 | Active Exploitation1 |
Our CTI team identified a lot of activities targeting HashiCorp Vault and Vault Enterprise (CVE-2026-5051) https://vuldb.com/vuln/375660/cti
Post summary
The CTI unit reports observed activity targeting HashiCorp Vault’s CVE‑2026‑5051, indicating potential in‑the‑wild exploitation, but provides no details on patches, PoC, or technical specifics.
🚨*CVE* CVE-2026-5051 HashiCorp Vault and Vault Enterprise prior to 2.0.1 audit device validation logic did not consistently apply plugin directory protections when the legacy file audit pat… https://www.cve.org/CVERecord?id=CVE-2026-5051 ----- Traducción: CVE-2026-5051 Has… http://infoflow.cloud`
Post summary
The tweet announces CVE‑2026‑5051 impacting HashiCorp Vault, describing a directory protection flaw, but provides no PoC, exploit, patch, or active exploitation information.
CVE-2026-5051 HashiCorp Vault and Vault Enterprise prior to 2.0.1 audit device validation logic did not consistently apply plugin directory protections when the legacy file audit pat… https://www.cve.org/CVERecord?id=CVE-2026-5051
Post summary
The post announces a CVE for HashiCorp Vault/Enterprise, detailing a flaw in audit device validation logic that affects plugin directory protection prior to version 2.0.1.