{"id":"CVE-2026-105608","aliases":[],"cve":{"records":[{"id":"CVE-2026-105608","source":"HashiCorp","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-10-05T16:15:56.816Z","published":"2026-10-26T17:52:33.021Z","modified":"2026-10-26T19:38:29.607Z"}],"publishers":[{"name":"HashiCorp","role":"CNA","organizationId":"67fedba0-ff2e-4543-ba5b-aa93e87718cc","modified":"2026-10-26T17:53:16.484Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-10-26T19:38:29.607Z"}],"references":[{"url":"https://discuss.hashicorp.com/t/hcsec-2026-47-consul-vulnerable-to-an-authorization-bypass-in-service-mesh-registration/77912","tags":[],"source":"HashiCorp"}],"weaknesses":[{"id":"CWE-178","description":"CWE-178: Improper Handling of Case Sensitivity","source":"HashiCorp"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-10-26T19:05:41.796579Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"total"}]}]},"title":"Consul vulnerable to an authorization bypass in service mesh registration","titleSource":"HashiCorp","descriptionSource":"HashiCorp","description":"HashiCorp Consul and Consul Enterprise are vulnerable to an authorization bypass in service mesh proxy registration. This may allow a user with service write permission to apply Envoy escape-hatch configuration without the required mesh write permission. This vulnerability (CVE-2026-105608) is fixed in Consul Community Edition 2.1.0 and Consul Enterprise 2.1.0 and 1.21.19.","score":8.8,"severity":"high","published":"2026-10-26T17:52:33.021Z","modified":"2026-10-26T19:38:29.607Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"HashiCorp","name":"Consul","platforms":["64 bit","32 bit","x86","ARM","MacOS","Windows","Linux"],"versions":[{"version":"2.0.4","status":"affected","lessThan":"2.1.0","versionType":"semver"}],"defaultStatus":"unaffected","cpes":[],"source":"HashiCorp","url":"https://www.cve.org/CVERecord?id=CVE-2026-105608"},{"vendor":"HashiCorp","name":"Consul Enterprise","platforms":["64 bit","32 bit","x86","ARM","MacOS","Windows","Linux"],"versions":[{"version":"2.0.4","status":"affected","lessThan":"2.1.0","versionType":"semver","changes":[{"at":"1.21.18","status":"affected"},{"at":"1.21.19","status":"unaffected"},{"at":"1.22.12","status":"affected"}]}],"defaultStatus":"unaffected","cpes":[],"source":"HashiCorp","url":"https://www.cve.org/CVERecord?id=CVE-2026-105608"}],"remediation":[],"references":["https://discuss.hashicorp.com/t/hcsec-2026-47-consul-vulnerable-to-an-authorization-bypass-in-service-mesh-registration/77912"],"sources":[{"name":"CVE","id":"CVE-2026-105608","modified":"2026-10-26T19:38:29.607Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-105608"}],"assessments":[{"source":"HashiCorp","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","score":8.8}],"sourceAffected":[],"observedAt":"2026-10-29T14:14:24.935Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T03:20:35.359Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[],"aiSummary":{"text":"HashiCorp Consul and Consul Enterprise are vulnerable to an authorization bypass in service mesh proxy registration, potentially allowing users with service write permission to apply Envoy escape-hatch configuration without mesh write permission. Affected versions include Consul Community Edition and Consul Enterprise before 2.1.0 and 1.21.19.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-10-30T08:39:55.073Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-105608"}]}}