CVE-2026-77285
Description
A flaw was found in OpenBao Agent. The agent's exec rendering mode can incorrectly write secrets from env_template to standard output. This occurs when the template runner is re-created after repeated rendering failures, specifically when num_retries is met. A local user, process supervisor, or log collector with access to the standard output could obtain these rendered secret values, leading to information disclosure.
Statement
Red Hat Product Security has determined that this vulnerability does not affect any currently supported Red Hat product. This assessment may evolve based on further analysis and discovery. For more information about this vulnerability and the products it affects, please see the linked references.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
