CVE-2026-115369
Description
A flaw was found in OpenBao. When processing a Certificate Signing Request (CSR) in the Public Key Infrastructure (PKI) engine, the service fails to enforce configured IP address restrictions against requested Subject Alternative Names (SAN). An authenticated remote user with certificate signing privileges can exploit this vulnerability by submitting a request containing restricted IP addresses. Successful exploitation allows the attacker to obtain trusted certificates for unauthorized network addresses, bypassing security controls.
Statement
This vulnerability is rated as Low severity because successful exploitation requires an authenticated attacker to possess explicit certificate signing privileges on a configured PKI role, substantially restricting the attack surface. Furthermore, OpenBao is not distributed or packaged in Red Hat enterprise products, meaning standard Red Hat environments are not affected. In custom standalone deployments, the impact is confined to issuing certificates containing out-of-range IP Subject Alternative Names, with no compromise of root Certificate Authority keys or underlying host integrity.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
