Skip to content
fr Sign in
4.7 Medium

CVE-2026-14361 The consul-template library before version 0.42.1 is vulnerable to a path redirection issue in the writeToFile…

Description

The consul-template library before version 0.42.1 is vulnerable to a path redirection issue in the writeToFile template helper that may allow template output to be written outside the intended directory or to overwrite an existing file. This vulnerability (CVE-2026-14361) is fixed in consul-template 0.42.1.

Affected products and versions

Product Affected versions Fixed in
Tooling 0.1 0.1.0 → < 0.42.1 0.42.1

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Tooling

The 13 CVEs of Tooling →
CVE-2026-110720 Consul-k8s versions 0.42.0 and later are vulnerable to a cross-namespace authorization bypass in component ACL binding… 9.9 Critical CVE-2026-87993 The consul-template library is vulnerable to an information disclosure issue in its error handling path that may allow… 7.7 High CVE-2026-8715 Vault Secrets Operator 1.3.0 up to 1.4.1 is vulnerable to an arbitrary file read and credential exfiltration issue in… 9.6 Critical CVE-2026-16326 In consul-mcp-server, versions 0.1.0 up to 0.1.3 did not properly isolate session state in stateless mode, which may… 10.0 Critical
Track this CVE