THREATOPS

THREAT OPS › Threat News › HashiCorp security advisory (AV26-817)

HashiCorp security advisory (AV26-817)

highcccs_caPublished 2026-08-14

<article data-history-node-id="8115" about="/en/alerts-advisories/hashicorp-security-advisory-av26-817" class="cccs-threats full clearfix">

<div class="content"> <div class="layout layout--onecol"> <div class="layout__region layout__region--content">

<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-

Indicators of compromise

https://discuss.hashicorp.com/t/hcsec-2026-28-vault-secrets-operator-vulnerable-to-arbitrary-file-read-via-approle-secretidpath/77645url
https://discuss.hashicorp.com/c/security/52url

Original source: https://cyber.gc.ca/en/alerts-advisories/hashicorp-security-advisory-av26-817