HashiCorp has released fixes for a Consul-k8s authorization bypass that could allow an attacker to gain elevated Consul privileges from another Kubernetes namespace. Tracked as CVE-2026-110720, the flaw affects deployments using automated system access control list management. HashiCorp disclosed the issue on October 26, 2026, and identified Consul-k8s 2.1.0 and 1.8.18 as patched releases. The […]
This article has been indexed from Cyber Security News
Read the original article:
Critical HashiCorp Consul Kubernetes Flaw Allows Attackers to Gain Elevated Privileges