HashiCorp security advisory (AV26-791)
Serial Number: AV26-791 Date: August 10, 2026 As of August 7, 2026, HashiCorp is affected by vulnerabilities in the following products: Consul Community Edition Prior to 2.0.3 Consul Enterprise Prior to 2.0.3 Prior to 1.22.11 Prior to 1.21.17 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. HCSEC-2026-25 - Multiple vulnerabilities impacting HashiCorp Consul - Security - HashiCorp Discuss Security - HashiCorp Discuss
CSIRTS triage
- What
- HashiCorp Consul Community and Enterprise editions contain multiple vulnerabilities affecting versions prior to specified release numbers.
- Who is affected
- Organizations running HashiCorp Consul Community Edition or Enterprise prior to 2.0.3, or legacy versions prior to 1.22.11 and 1.21.17.
- Urgency
- Severity unknown; no exploitation status or CVE details provided, limiting immediate risk assessment.
- Action
- Upgrade HashiCorp Consul to version 2.0.3 or apply fixes for versions 1.22.11 and 1.21.17 as appropriate.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch Consul
Get an email when a new Consul advisory drops — max one per day, one-click unsubscribe.
Details
Original advisory: https://cyber.gc.ca/en/alerts-advisories/hashicorp-security-advisory-av26-791
More from Canadian Centre for Cyber Security
- unknownWatchGuard security advisory (AV26-847)2026-08-25
- unknownOpenSSL security advisory (AV26-846)2026-08-25
- unknownGitea security advisory (AV26-845)2026-08-25
- unknownGoogle security advisory (AV26-844)2026-08-24
- criticalOracle security advisory – January 2026 quarterly rollup (AV26-042) – Update 22026-08-24