PT-2026-36926 · Hashicorp · Boundary Enterprise+1

Published 2026-05-04 · Updated 2026-05-04 · CVE-2026-7776

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Boundary Community Edition versions prior to 0.21.3 Boundary Community Edition versions prior to 0.20.3 Boundary Community Edition versions prior to 0.19.5 Boundary Enterprise versions prior to 0.21.3 Boundary Enterprise versions prior to 0.20.3 Boundary Enterprise versions prior to 0.19.5

Description Workers are susceptible to a denial-of-service condition during node enrollment TLS handshakes. An attacker with network access to the worker authentication listener can open a connection and delay or withhold the client certificate during the TLS handshake, which causes worker connection handling to block. This action may prevent legitimate worker connections from being accepted or routed.

Recommendations Update to version 0.21.3 Update to version 0.20.3 Update to version 0.19.5

Fix

DoS

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2026-7776

Affected Products

Boundary Community Edition

Boundary Enterprise

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-7776 · Security Note
• https://twitter.com/CVEnew/status/2051420949904335001 · Twitter Post
• https://twitter.com/infoflowcloud/status/2051421777457238408 · Twitter Post
• https://discuss.hashicorp.com/t/hcsec-2026-11-boundary-workers-vulnerable-to-denial-of-service-during-tls-handshake · Note