CVE-2026-105816 - Vault Vulnerable to Arbitrary Code Execution via Plugin Catalog Entries Restored From Raft Snapshots
CVE ID :CVE-2026-105816 Published : Oct. 7, 2026, 10:17 p.m. | 1 hour, 12 minutes ago Description :Vault and Vault Enterprise did not consistently verify that stored plugin catalog entries reference binaries within the configured plugin directory. When Vault uses Shamir seals and has an...