Critical HashiCorp Consul Kubernetes Flaw Allows Attackers to Gain Elevated Privileges
HashiCorp has released fixes for a Consul-k8s authorization bypass that could allow an attacker to gain elevated Consul privileges from another Kubernetes namespace. Tracked as CVE-2026-110720, the flaw affects deployments using automated system access control list management. HashiCorp disclosed the issue on October 26, 2026, and identified Consul-k8s 2.1.0 and 1.8.18 as patched releases. The […]
The post https://cybersecuritynews.com/hashicorp-consul-kubernetes-vulnerability/ appeared first on https://cybersecuritynews.com.
https://cybersecuritynews.com/hashicorp-consul-kubernetes-vulnerability/
