Skip to content

Vulnerabilities of HashiCorp Boundary

Is your version affected?

CVE Summary Score Published
CVE-2026-13303 HashiCorp Boundary and Boundary Enterprise are vulnerable to a server-side request forgery in the Vault credential store… 8.7 High Oct 29, 2026
CVE-2026-7776 Boundary Community Edition and Boundary Enterprise (“Boundary”) workers are vulnerable to a denial-of-service… 7.5 High May 4, 2026
CVE-2024-12289 Boundary Community Edition and Boundary Enterprise (“Boundary”) incorrectly handle HTTP requests during the… 5.9 Medium Dec 12, 2024
CVE-2024-1052 Boundary and Boundary Enterprise (“Boundary”) is vulnerable to session hijacking through TLS certificate tampering 8.0 High Feb 5, 2024
CVE-2023-0690 HashiCorp Boundary from 0.10.0 through 0.11.2 contain an issue where when using a PKI-based worker with a Key Management… 5.0 Medium Feb 8, 2023

Other HashiCorp products