Researchers Uncover RCE Attack Chains in HashiCorp Vault and CyberArk Conjur

[yodon]

Also discussed in https://news.ycombinator.com/item?id=44821434

[milliams]

Does this affect OpenBao as well?

[JanMa]

Yes this does affect OpenBao as well. We're actively working on getting a fix out as soon as possible

[Scandiravian]

Even more importantly; were these vulnerabilities responsibly disclosed to the OpenBao project before they were published?*

*Assuming OpenBao has a process in place for this

[chucky_z]

Almost all of these except the enterprise MFA control group stuff will be in OpenBao yeah