CVE-2026-115804
Awaiting Analysis Awaiting Analysis - Queue

Authorization Bypass in HashiCorp Consul Health Checks

Publication date: 2026-10-26

Last updated on: 2026-10-26

Assigner: HashiCorp Inc.

Description
HashiCorp Consul and Consul Enterprise are vulnerable to an authorization bypass in health check registration that may allow an authenticated user to modify health checks belonging to another service on the same node. This vulnerability (CVE-2026-115804) is fixed in Consul Community Edition 2.1.0 and Consul Enterprise 2.1.0 and 1.21.19.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-26
Last Modified
2026-10-26
Generated
2026-10-26
AI Q&A
2026-10-26
EPSS Evaluated
N/A
NVD
CVE-2026-115804
EUVD
EUVD-2026-110064

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
HashiCorp Consul 0.7.2
HashiCorp Consul Enterprise 0.7.2

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-639 The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

HashiCorp Consul and Consul Enterprise have an authorization bypass vulnerability in health check registration. An authenticated user with service:write permission for one service on a node can modify health checks belonging to another service on the same node. This could alter the affected service's reported health status, impacting service discovery or mesh routing decisions.

Detection Guidance

To detect this vulnerability, review Consul logs for unauthorized health check modifications. Check for ACL logs showing service:write permissions used across different services on the same node. Use Consul API to query health checks and compare registered checks with expected configurations.

Impact Analysis

This vulnerability allows an attacker to manipulate health statuses of services they do not own, potentially causing incorrect routing decisions or service discovery issues. It requires ACLs to be enabled and the attacker to have write access to a different service on the same node.

Mitigation Strategies

Immediately upgrade to Consul Community Edition 2.1.0 or Consul Enterprise 2.1.0/1.21.19. If upgrading is not possible, restrict service:write ACL permissions to prevent cross-service modifications. Monitor health check configurations for unexpected changes.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-115804. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart