Authorization Bypass in Consul and Consul Enterprise

CVE-2026-87090

What is CVE-2026-87090?

Consul and Consul Enterprise are subject to an authorization bypass vulnerability within the catalog node-write path. This flaw permits an authenticated attacker, who possesses a node-write permission token for a specific node, to delete the catalog registration of another node and assume its identity. If an attacker gains knowledge of the node ID of a node that they do not control, they can exploit this weakness to manipulate node registrations, leading to potential unauthorized actions within the Consul environment. Users are encouraged to upgrade to patched versions to mitigate this issue.

References