HashiCorp Consul Vulnerability Allows Attackers to Bypass Authorization and Gain Elevated Privileges
HashiCorp disclosed a vulnerability in consul-k8s, a cross-namespace authorization bypass that could let attackers with limited Kubernetes permissions gain elevated Consul privileges. This vulnerability is tracked as CVE-2026-110720 and affects component access control list (ACL) binding rules when automated system ACL management is enabled. HashiCorp published advisory HCSEC-2026-50 on October 26, 2026, and released fixes […] The post HashiCorp Consul Vulnerability Allows Attackers to Bypass Authorization and Gain Elevated Privileges appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .
Continue on GBHackers ↗ ‹ All news Get the newsletter
The summary and image come from GBHackers; the image is shown from their website.