consul-k8s

Mentions · 7d2
Mentions · 30d2
All mentions2
First seenOct 27, 2026
Last mentioned3d ago

Timeline

2 articles · newest first

HashiCorp patches Consul-k8s cross-namespace ACL bypass (CVE-2026-110720)

Versions 0.42.0 through 2.0.4 are affected only with system ACL management on; fixes are 1.8.18 and 2.1.0.

Cyber Security Newsupdated Oct 30, 15:49 UTC · 10h agofirst Oct 27, 11:37 UTC · 3d agoVulnerability 4 sourcesCVE-2026-1107201

consul-k8s ACL flaw can grant elevated Consul privileges (CVE-2026-110720)

An attacker must already create a ServiceAccount in another namespace and reach the Consul API; active exploitation is not confirmed.

GBHackersupdated Oct 30, 15:49 UTC · 10h agofirst Oct 27, 11:03 UTC · 3d agoVulnerability 4 sourcesCVE-2026-1107201

Related CVEs

by mentions

CVE-2026-1107209.9
Cross-namespace ACL bypass in Consul-k8s 0.42.0+
published 4d agoHashiCorp consul-k8s

Appears with

HashiCorpvendor · 2
Consulproduct · 1

Entities are extracted by the model from each article. First seen Oct 27, 2026, last mentioned 3d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.