Improper Authorization in OpenBao - CVE-2026-55775
Published: August 19, 2026
Vulnerability details
The vulnerability allows a remote user to perform unauthorized management operations on the containing namespace.
The vulnerability exists due to improper authorization in /sys/namespaces/* endpoints when processing the literal \"root\" namespace path during namespace path canonicalization. A remote user can send a request to /sys/namespaces/root to perform unauthorized management operations on the containing namespace.
The issue only affects non-root namespaces, and the exact operations depend on the capabilities granted on the path and related sub-paths such as /api-lock. The root namespace is unaffected, and exploitation is limited to the direct containing namespace rather than arbitrary namespaces.
Affected software
Fedora
openbao
How to mitigate CVE-2026-55775
openbao - addressed in versions 2.5.5-1.el8, 2.5.5-1.el9, 2.5.5-1.el10_2, 2.5.5-1.el10_3, 2.5.5-1.fc43, 2.5.5-1.fc44