StackRadar

CVE-2026-5807

High

Advisory

Published 17 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.007
52nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
18
of 17,781 indexed, latest versions
Container images
14
deployed by those charts
Fix available
None
affected package

HashiCorp Vault Vulnerable to Denial-of-Service via Unauthenticated Root Token Generation/Rekey Operations

Carried by container images the latest versions of 18 of 17,781 indexed charts deploy, on 14 images.

Affected packageAffected versionsFixed inImages
github.com/hashicorp/vaultgolang1.15.4, 1.19.0, 1.19.5, 1.20.4+10 moreno fix listed14
OSV records
GHSA-88v5-9hxc-f85rGO-2026-5247
Also known as
BIT-vault-2026-5807

Charts affected

18 by stars
ChartLatestAffected imagesRadar Score
vaulthashicorpVerified publisher0.34.11 of 2See more

vault hashicorp 0.34.1

1 of the 2 container images this version deploys carry CVE-2026-5807.

Container imageDigestPackageFixed in
hashicorp/vault:2.0.45be49781ecf7
github.com/hashicorp/vault@v2.0.4
no fix listed

Open the chart page →

542
vaultvaultVerified publisher1.22.01 of 4See more

vault vault 1.22.0

1 of the 4 container images this version deploys carry CVE-2026-5807.

Container imageDigestPackageFixed in
hashicorp/vault:2.0.1755355002715
github.com/hashicorp/vault@v2.0.1
no fix listed

Open the chart page →

4,243
vault-gcp-secretsvault-gcp-secrets1.19.51 of 1See more

vault-gcp-secrets vault-gcp-secrets 1.19.5

1 of the 1 container images this version deploys carry CVE-2026-5807.

Container imageDigestPackageFixed in
ghcr.io/tjm/vault-gcp-secrets:v1.19.59f157fe035f1
github.com/hashicorp/vault@1.19.5
no fix listed

Open the chart page →

2,289
amorphieamorphie0.1.21 of 18See more

amorphie amorphie 0.1.2

1 of the 18 container images this version deploys carry CVE-2026-5807.

Container imageDigestPackageFixed in
hashicorp/vault:1.15.26b4e5dadf082
github.com/hashicorp/vault@v0.0.0-20231106193328-cf1b5cafa047
no fix listed

Open the chart page →

28,131
firehoseblip-firehoseVerified publisher0.0.181 of 11See more

firehose blip-firehose 0.0.18

1 of the 11 container images this version deploys carry CVE-2026-5807.

Container imageDigestPackageFixed in
hashicorp/vault:1.15.26b4e5dadf082
github.com/hashicorp/vault@v0.0.0-20231106193328-cf1b5cafa047
no fix listed

Open the chart page →

13,459
cp4d-deployercloud-native-toolkit1.0.01 of 1See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-5807.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
github.com/hashicorp/vault@v1.14.1
no fix listed

Open the chart page →

25,151
evi-vaultintelVerified publisher3.0.31 of 2See more

evi-vault intel 3.0.3

1 of the 2 container images this version deploys carry CVE-2026-5807.

Container imageDigestPackageFixed in
hashicorp/vault:1.12.18de4d5f31b38
github.com/hashicorp/vault@v1.12.1
no fix listed

Open the chart page →

4,478
vaultintelVerified publisher0.8.11 of 2See more

vault intel 0.8.1

1 of the 2 container images this version deploys carry CVE-2026-5807.

Container imageDigestPackageFixed in
hashicorp/vault:1.12.18de4d5f31b38
github.com/hashicorp/vault@v1.12.1
no fix listed

Open the chart page →

4,478
vaultjfrog0.25.01 of 2See more

vault jfrog 0.25.0

1 of the 2 container images this version deploys carry CVE-2026-5807.

Container imageDigestPackageFixed in
hashicorp/vault:1.14.0b2177a8bfe85
github.com/hashicorp/vault@v1.14.0
no fix listed

Open the chart page →

3,968
vaultkubeblocksVerified publisher0.30.01 of 2See more

vault kubeblocks 0.30.0

1 of the 2 container images this version deploys carry CVE-2026-5807.

Container imageDigestPackageFixed in
hashicorp/vault:1.19.0bbb7f98dc67d
github.com/hashicorp/vault@1.19.0
no fix listed

Open the chart page →

2,742
flaggermesosphere0.21.01 of 2See more

flagger mesosphere 0.21.0

1 of the 2 container images this version deploys carry CVE-2026-5807.

Container imageDigestPackageFixed in
weaveworks/flagger:0.19.0a9c2e9df4227
github.com/hashicorp/vault@v1.1.0
no fix listed

Open the chart page →

6,048
vault-helm-chartnotesprojectchart0.1.01 of 1See more

vault-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-5807.

Container imageDigestPackageFixed in
library/vault:1.13.3f98ac9dd97b0
github.com/hashicorp/vault@v1.13.3
no fix listed

Open the chart page →

2,246
kb-cloud-installeropenshift2.1.351 of 1See more

kb-cloud-installer openshift 2.1.35

1 of the 1 container images this version deploys carry CVE-2026-5807.

Container imageDigestPackageFixed in
apecloud/kb-cloud-installer:v2.1.42-certified98abc64aa985
github.com/hashicorp/vault@1.20.4
no fix listed

Open the chart page →

4,127
vault-devsikalabs0.2.01 of 1See more

vault-dev sikalabs 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-5807.

Container imageDigestPackageFixed in
hashicorp/vault:latest5520cc26271c
github.com/hashicorp/vault@2.1.0
no fix listed

Open the chart page →

224
vaultwenerme0.34.11 of 2See more

vault wenerme 0.34.1

1 of the 2 container images this version deploys carry CVE-2026-5807.

Container imageDigestPackageFixed in
hashicorp/vault:2.0.45be49781ecf7
github.com/hashicorp/vault@v2.0.4
no fix listed

Open the chart page →

542
wexa-studiowexa-studio1.2.01 of 15See more

wexa-studio wexa-studio 1.2.0

1 of the 15 container images this version deploys carry CVE-2026-5807.

Container imageDigestPackageFixed in
hashicorp/vault:1.15.40b01ed3924e6
github.com/hashicorp/vault@1.15.4
no fix listed

Open the chart page →

14,983
ceph-csi-cephfswikimedia0.1.81 of 5See more

ceph-csi-cephfs wikimedia 0.1.8

1 of the 5 container images this version deploys carry CVE-2026-5807.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
github.com/hashicorp/vault@v1.4.2
no fix listed

Open the chart page →

10,285
ceph-csi-rbdwikimedia0.1.131 of 6See more

ceph-csi-rbd wikimedia 0.1.13

1 of the 6 container images this version deploys carry CVE-2026-5807.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
github.com/hashicorp/vault@v1.4.2
no fix listed

Open the chart page →

11,784

Container images carrying it

14 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
hashicorp/vault:2.0.45be49781ecf7
github.com/hashicorp/vault@v2.0.4
no fix listed
2
hashicorp/vault:1.15.26b4e5dadf082
github.com/hashicorp/vault@v0.0.0-20231106193328-cf1b5cafa047
no fix listed
2
hashicorp/vault:1.12.18de4d5f31b38
github.com/hashicorp/vault@v1.12.1
no fix listed
2
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
github.com/hashicorp/vault@v1.4.2
no fix listed
2
apecloud/kb-cloud-installer:v2.1.42-certified98abc64aa985
github.com/hashicorp/vault@1.20.4
no fix listed
1
hashicorp/vault:1.15.40b01ed3924e6
github.com/hashicorp/vault@1.15.4
no fix listed
1
hashicorp/vault:latest5520cc26271c
github.com/hashicorp/vault@2.1.0
no fix listed
1
hashicorp/vault:2.0.1755355002715
github.com/hashicorp/vault@v2.0.1
no fix listed
1
hashicorp/vault:1.14.0b2177a8bfe85
github.com/hashicorp/vault@v1.14.0
no fix listed
1
hashicorp/vault:1.19.0bbb7f98dc67d
github.com/hashicorp/vault@1.19.0
no fix listed
1
library/vault:1.13.3f98ac9dd97b0
github.com/hashicorp/vault@v1.13.3
no fix listed
1
weaveworks/flagger:0.19.0a9c2e9df4227
github.com/hashicorp/vault@v1.1.0
no fix listed
1
ghcr.io/tjm/vault-gcp-secrets:v1.19.59f157fe035f1
github.com/hashicorp/vault@1.19.5
no fix listed
1
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
github.com/hashicorp/vault@v1.14.1
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.