PT-2026-33400 · Hashicorp+1 · Vault Enterprise+2

Oleh Konko + 1 · CVE-2026-5052 · Published 2026-04-17 · Updated 2026-07-30

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions HashiCorp Vault Community Edition versions prior to 2.0.0 HashiCorp Vault Enterprise versions prior to 1.19.16 HashiCorp Vault Enterprise versions 1.19.16 through 1.20.9 HashiCorp Vault Enterprise versions 1.20.10 through 1.21.4 HashiCorp Vault Enterprise versions prior to 1.21.5 HashiCorp Vault Enterprise versions prior to 2.0.0

Description The PKI engine ACME validation fails to reject local targets during the issuance of 'http-01' and 'tls-alpn-01' challenges. This flaw may result in requests being directed to targets within the local network, which could lead to information disclosure.

Recommendations Update HashiCorp Vault Community Edition to version 2.0.0. Update HashiCorp Vault Enterprise to version 1.19.16, 1.20.10, 1.21.5, or 2.0.0.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

BDU:2026-08963

BIT-VAULT-2026-5052

CVE-2026-5052

GHSA-8R5M-3F66-QPR3

GO-2026-5262

OPENSUSE-SU-2026:21483-1

Affected Products

Red Os

Vault Community Edition

Vault Enterprise

References · 1751

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/5xxx/CVE-2026-5052.json · Exploit
• https://osv.dev/vulnerability/GHSA-8r5m-3f66-qpr3 · Vendor Advisory
• https://discuss.hashicorp.com/t/hcsec-2026-06-vault-vulnerable-to-server-side-request-forgery-in-acme-challenge-validation-via-attacker-controlled-dns/77343 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-5052 · Security Note
• https://osv.dev/vulnerability/CVE-2026-5052 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-08963 · Security Note
• https://osv.dev/vulnerability/BIT-vault-2026-5052 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2026-5262 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:21483-1 · Vendor Advisory
• https://github.com/hashicorp/vault · Note
• https://suse.com/security/cve/CVE-2025-65797 · Note
• https://suse.com/security/cve/CVE-2026-44427 · Note
• https://suse.com/security/cve/CVE-2026-27589 · Note
• https://suse.com/security/cve/CVE-2026-7736 · Note
• https://suse.com/security/cve/CVE-2026-27137 · Note