Denial of Service Vulnerability in HashiCorp Vault

CVE-2026-5807

What is CVE-2026-5807?

HashiCorp Vault is susceptible to a denial-of-service condition where an unauthenticated attacker can misuse the root token generation and rekey operations. By continuously initiating or canceling these operations, the attacker monopolizes the operation slot, blocking legitimate users from finalizing their tasks. This flaw underscores the importance of securing access to Vault to ensure operational continuity. Users are advised to upgrade to Vault Community Edition 2.0.0 or Vault Enterprise 2.0.0, where this issue has been addressed.

References