CVE-2026-55774

Unscored

Advisory

Published 25 Jun 2026In the index since 14 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: —; probability of exploitation
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1; of 17,781 indexed, latest versions
Container images: 1; deployed by those charts
Fix available: 1 of 1; affected package

OpenBao: Cross-namespace lease revocation/renewal via canonical sys/leases/{revoke,renew} — incomplete fix of CVE-2026-45808 in github.com/openbao/openbao

Carried by container images the latest versions of 1 of 17,781 indexed charts deploy, on 1 image.

Affected package	Affected versions	Fixed in	Images
github.com/openbao/openbaogolang	v2.6.2	0.0.0-20260617103932-b20b999dd404	1

OSV records: GO-2026-5304
Also known as: GHSA-c36x-h252-g9x2

Charts affected

1 by stars

Chart

Latest

Affected images

Radar Score

openbaoquench-openbao

0.0.13

1 of 1 See more

openbao quench-openbao 0.0.13

1 of the 1 container images this version deploys carry CVE-2026-55774.

Container image	Digest	Package	Fixed in
ghcr.io/quenchworks/images/openbaodigest-pinned	15d378d29897	github.com/openbao/openbao@v2.6.2	0.0.0-20260617103932-b20b999dd404

Open the chart page →

172

Container images carrying it

1 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/quenchworks/images/openbao	15d378d29897	github.com/openbao/openbao@v2.6.2	0.0.0-20260617103932-b20b999dd404	1