https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-23T12:16:41.464337+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-115364 fkie_cve-2026-115364 2026-10-23T12:16:41.491430+00:00

OpenBao before 2.6.3 contains a missing authorization check that allows attackers to stop Agent and Proxy services by omitting the X-Vault-Header. When require_request_header is enabled, attackers can send requests via server-side request forgery to /agent/v1/quit or /proxy/v1/quit to shut down these services.

 https://db.gcve.eu/vuln/ghsa-rw7f-qpfc-j3vm GHSA-rw7f-qpfc-j3vm 2026-10-23T12:16:41.491636+00:00

OpenBao before 2.6.3 contains a missing authorization check that allows attackers to stop Agent and Proxy services by omitting the X-Vault-Header. When require_request_header is enabled, attackers can send requests via server-side request forgery to /agent/v1/quit or /proxy/v1/quit to shut down these services.