HashiCorp security advisory (AV26-817)
Brief
Serial number: AV26-817 Date: August 14, 2026
As of August 13, 2026, HashiCorp is affected by a vulnerability in the following product
- Vault Secrets Operator - Prior to 1.5.0
The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.
- HCSEC-2026-28 - Vault Secrets Operator vulnerable to arbitrary file read via AppRole secretIDPath
- Security - HashiCorp Discuss
HashiCorp security advisory (AV26-817) - Canadian Centre for Cyber Security