CVE-2026-71543
Description
A flaw was found in OpenBao, an open-source identity-based secrets management system. Templated Access Control List (ACL), Public Key Infrastructure (PKI), and Secure Shell (SSH) policies could substitute attacker-controlled identity data without properly rejecting syntax-significant characters. This vulnerability allows an attacker to use characters such as asterisks, plus signs, slashes, and commas to alter path matching, broaden certificate issuance to unauthorized domains, or add unauthorized principals. Exploitation requires a deployment where users can freely modify templated policy data, potentially leading to privilege escalation, unauthorized access, or unauthorized certificate issuance.
Statement
This vulnerability is rated as Important because an attacker capable of manipulating identity values could circumvent access controls, potentially gaining elevated privileges or unauthorized certificates across templated engines. OpenBao is not distributed or supported as part of Red Hat Enterprise Linux, substantially limiting exposure across supported Red Hat environments. Furthermore, exploitation is contingent on administrators utilizing dynamic identity templates that permit arbitrary user input rather than relying on immutable, system-generated identity attributes.
Understanding the Weakness (CWE)
Availability,Access Control,Non-Repudiation
Technical Impact: DoS: Crash, Exit, or Restart; Bypass Protection Mechanism; Hide Activities
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
