{"id":"CVE-2026-115356","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-115356","generatedAt":"2026-10-28T05:28:09.265Z","title":"An authenticated attacker can keep renewing such tokens to persist access after the Kubernetes service account has been deleted.","description":"OpenBao before 2.6.4 and 2.7.x before 2.7.1 does not verify, when renewing a token issued by the Kubernetes Auth method, that the service account token originally used to authenticate is still valid. An authenticated attacker can keep renewing such tokens to persist access after the Kubernetes service account has been deleted.","published":"2026-10-22T19:17:42.000Z","lastModified":"2026-10-23T15:17:28.000Z","status":"Deferred","sourceIdentifier":"disclosure@vulncheck.com","cvss":{"version":"4.0","score":5.3,"severity":"MEDIUM","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M"},"cwe":["CWE-613"],"affected":[],"epss":{"score":0.00213,"percentile":0.11487,"date":"2026-10-27","history":[{"date":"2026-10-23","score":0.00174,"percentile":0.06552}]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.21%). Track it; it rarely justifies an emergency change on its own."},"changes":[{"kind":"new","label":"New CVE","at":"2026-10-22T19:17:42.000Z","detail":{"score":"5.3","severity":"MEDIUM","publishedAt":"2026-10-22T19:17:41.677Z"},"summary":"New CVE, medium severity (CVSS 5.3)."}],"references":[{"url":"https://github.com/openbao/openbao/security/advisories/GHSA-gf3j-hm38-jhh5","source":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/openbao-before-2.6.4-and-2.7.0-before-2.7.1-kubernetes-auth-method-token-renewal-after-revocation","source":"disclosure@vulncheck.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-115356","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}