CVE-2026-32692
Unauthorized update of out-of-scope Vault secrets
Résumé
Unauthorized update of out-of-scope Vault secrets
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An authorization bypass vulnerability in the Vault secrets back-end implementation of Juju versions 3.1.6 through 3.6.18 allows an authenticated unit agent to perform unauthorized updates to secret revisions. With sufficient information, an attacker can poison any existing secret revision within the scope of that Vault secret back-end.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- web github.com