Medium severity5.9NVD Advisory· Published Nov 13, 2026
CVE-2026-92735
CVE-2026-92735
Description
HashiCorp Vault and Vault Enterprise are vulnerable to an issue in the integrated storage join process that may allow an unauthenticated attacker with network access to a new, uninitialized node to cause that node to send credentials from its server environment to an attacker-controlled server. This vulnerability (CVE-2026-92735) is fixed in Vault Community Edition 2.2.2 and Vault Enterprise 2.2.2, 1.21.14, and 1.19.25.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: before 2.2.2, 1.21.14, and 1.19.25
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.