CVE-2026-5051CWE-22

Audit Log Plugin Directory Guard Bypass via Legacy path Option

Medium · published July 1, 2026

CVSS v3.1
4.4
EPSS
0%
Percentile
31.2
In the wild
Unconfirmed
What it is

HashiCorp Vault and Vault Enterprise prior to 2.0.1 audit device validation logic did not consistently apply plugin directory protections when the legacy file audit path option was used.

This vulnerability (CVE-2026-5051) is fixed in 2.0.1, 1.21.6, 1.20.11, and 1.19.17.

The record
Technical detail
CVSS v3.1
4.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00384 · 31.2th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2026-07-01T17:10Z
EPSS history
Timeline
  • 01 JUL 17:10Z
    Audit Log Plugin Directory Guard Bypass via Legacy path Option
    cvelistv5