CVE-2026-2808: hashicorp consul Link Following
CVSS: 6.8v3.1MediumAwaiting analysis
AliasesSUSE-SU-2026:2740-1UBUNTU-CVE-2026-2808DEBIAN-CVE-2026-2808GHSA-cpfq-66p2-336jBIT-consul-2026-2808GO-2026-4690CGA-2v8q-55xw-j82gCGA-3w3q-rj33-wphxCGA-4vcm-7j55-47gmCGA-5h8j-hw6f-vvfgCGA-779j-qv9x-cw2hCGA-838w-p4w5-g2m9CGA-8656-cv2c-7q24CGA-8848-46vc-h74hCGA-8g2p-crpp-c8c3CGA-8g9w-6cjc-2f2gCGA-8jj4-pfp7-236cCGA-8pj8-5vwj-2522CGA-c86w-9m5h-fg5fCGA-ccg6-v4fh-h4h3CGA-cxc6-2wfg-j3qrCGA-cxvx-6p77-wjv9CGA-fj8m-vg47-g59gCGA-g384-pj9c-x446CGA-gg6p-2xj2-q9q4CGA-gjjj-jgwh-6rh8CGA-j2gp-rrp8-cj3fCGA-j2pg-9w2v-h5p9CGA-jcmr-5v4r-gwg4CGA-mgrg-8875-rw7xCGA-p7h5-rr32-259rCGA-qcgp-4f55-q35jCGA-vg3g-8pgh-6c46CGA-xf6j-2r3v-g6pq
Published 11-03-2026Last modified 17-04-2026
Vulnerability summary
CVE-2026-2808 is a medium (CVSS 6.8) Link Following vulnerability in hashicorp consul. EPSS estimates a 0.57% chance of exploitation in the next 30 days, higher than 46.1% of scored vulnerabilities.
CVSS score
6.8/10
010
Medium · v3.1 (CVE.org)EPSS score
0.57%
0%100%
Low · +0.10 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 2 · Related 2Timeline
- 11-03-2026PublishedVulnerability first disclosed.
- 17-04-2026Last modifiedVulnerability information updated.
Description
HashiCorp Consul and Consul Enterprise 1.18.20 up to 1.21.10 and 1.22.4 are vulnerable to arbitrary file read when configured with Kubernetes authentication. This vulnerability, CVE-2026-2808, is fixed in Consul 1.18.21, 1.21.11 and 1.22.5.
CVSS metrics
6 scores · 6 sources · 1 versionMedium 6.8Preferred score · CVE.org (CNA)
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:NSourcesAll 6 agree
- OSV · UbuntuEcosystem advisory · calculated6.8MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
- OSV · DebianEcosystem advisory · calculated6.8MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
- OSV · GoEcosystem advisory · calculated6.8MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
- OSV · ChainguardEcosystem advisory · calculated6.8MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
- NVDNIST6.8MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
EPSS trend
Probability
0.57%
Chance of exploitation in the next 30 days
Percentile
46%
Versus all other CVEs
30-day change
+0.10 pp
From 0.47% on 20-09-2026
20-09-202620-10-2026
EPSS score0.57%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Chainguard7 products
- consul-1.18All versions (No fix recorded)
- consul-1.19All versions (No fix recorded)
- consul-1.20All versions (No fix recorded)
- consul-1.21All versions (No fix recorded)
- consul-fips-1.19All versions (No fix recorded)
Hashicorp2 products
- consul< 1.22.5
- consul enterprise< 1.22.5
Suse2 products
- golang-github-docker-libnetwork&distro=SUSE Linux Enterprise Micro 5.3< 0.7.0.1+gitr2908_55e924b8-150000.4.34.1
- golang-github-docker-libnetwork&distro=SUSE Linux Enterprise Micro 5.4< 0.7.0.1+gitr2908_55e924b8-150000.4.34.1
Debian1 product
- consulAll versions (No fix recorded)
Github.com/hashicorp1 product
- consul< 1.18.21 | ≥ 1.22.0-rc1, < 1.22.5 | ≥ 1.19.0, < 1.21.11 | < 1.22.5
Ubuntu1 product
- consulAll versions (No fix recorded)
6 vendors · 14 products
References
12 links
- github.com/hashicorp/consulPACKAGE