Cross-Namespace Authorization Bypass in Consul-k8s by HashiCorp
CVE-2026-110720

9.9CRITICAL

Key Information:

Vendor

Hashicorp
Status
Tooling
Vendor
CVE Published:
26 October 2026

What is CVE-2026-110720?

The Consul-k8s product by HashiCorp is susceptible to a cross-namespace authorization bypass due to misconfigurations in component ACL binding rules. This flaw enables attackers to escalate their privileges within the Consul deployment. It affects all versions from 0.42.0 onward, necessitating a review and upgrade to version 2.1.0 or 1.8.18 or later to mitigate potential exploitation. Organizations utilizing Consul-k8s should urgently address this vulnerability to safeguard their environments against unauthorized access.

Affected Version(s)

Tooling 64 bit 0.42.0 < 2.0.4

References

https://discuss.hashicorp.com/t/hcsec-2026-50-consul-k8s-...

CVSS V3.1

Score:
9.9
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

This issue was reported to HashiCorp by Elias Hasas (GitHub: zer0d4y5).
.