QwikSec

Security Database

CVE

CWE

Training

CVE-2026-42186

Published: May 14, 2026

Modified: May 14, 2026

PUBLISHED

Description

OpenBao is an open source identity-based secrets management system. Prior to 2.5.3, when OpenBao's initial namespace deletion fails, subsequent retries fail to properly remove all data before marking the namespace as deleted. This can affect any outstanding leases as well as potentially leaving unrelated storage entries around. This vulnerability is fixed in 2.5.3.

Vendor	Product	Versions
openbao	openbao	affected `< 2.5.3`

Weaknesses (CWE)

References

https://github.com/openbao/openbao/security/advisories/GHSA-vv66-6rp4-wr4f

x_refsource_CONFIRM

https://github.com/openbao/openbao/commit/6d2e0506e2b41be0eaa6643bf7b4efc9a2c09445

x_refsource_MISC

https://github.com/openbao/openbao/releases/tag/v2.5.3

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.