Product by HashiCorp
HashiCorp Consul
60 known vulnerabilities in HashiCorp Consul (HashiCorp), 0 of them actively exploited (CISA KEV).
Key figures
60
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2021-41805 | HashiCorp Consul: Improper Access Control | 8.8 | |
| High | CVE-2022-29153 | HashiCorp Consul: Server-Side Request Forgery (SSRF) | 7.5 | |
| High | CVE-2021-3121 | Golang Protobuf: security vulnerability | 8.6 | |
| Medium | CVE-2020-25864 | HashiCorp Consul: Cross-Site Scripting (XSS) | 6.1 | |
| High | CVE-2020-13250 | HashiCorp Consul: Denial of Service | 7.5 | |
| High | CVE-2020-25201 | HashiCorp Consul: Denial of Service | 7.5 | |
| High | CVE-2021-28156 | HashiCorp Consul: security vulnerability | 7.5 | |
| High | CVE-2020-7219 | HashiCorp Consul: Denial of Service | 7.5 | |
| Critical | CVE-2026-16326 | consul-mcp-server vulnerable to cross-tenant credential reuse in streamable-HTTP stateless mode | 10.0 | |
| High | CVE-2026-105608 | Consul vulnerable to an authorization bypass in service mesh registration | 8.8 | |
| High | CVE-2020-13170 | HashiCorp Consul: security vulnerability | 7.5 | |
| High | CVE-2020-12758 | HashiCorp Consul: security vulnerability | 7.5 | |
| High | CVE-2021-36213 | HashiCorp Consul: security vulnerability | 7.5 | |
| Critical | CVE-2026-8715 | HashiCorp Tooling: Files or Directories Accessible to External Parties | 9.6 | |
| Critical | CVE-2026-16498 | terraform-mcp-server vulnerable to cross-tenant credential reuse in streamable-HTTP stateless mode | 10.0 | |
| High | CVE-2021-32574 | HashiCorp Consul: security vulnerability | 7.5 | |
| High | CVE-2021-37219 | HashiCorp Consul: Privilege Escalation | 8.8 | |
| High | CVE-2019-8336 | HashiCorp Consul: security vulnerability | 8.1 | |
| High | CVE-2026-105626 | Consul vulnerable to a denial of service in HTTP APIs | 7.5 | |
| Medium | CVE-2022-24687 | HashiCorp Consul: security vulnerability | 6.5 | |
| High | CVE-2026-15972 | Unauthenticated denial of service via unbounded external gRPC connection acceptance | 7.5 | |
| Medium | CVE-2020-28053 | HashiCorp Consul: security vulnerability | 6.5 | |
| Medium | CVE-2021-38698 | HashiCorp Consul: security vulnerability | 6.5 | |
| High | CVE-2026-87090 | Consul vulnerable to an authorization bypass in the catalog node-write path | 8.3 | |
| High | CVE-2019-12291 | HashiCorp Consul: Improper Access Control | 7.5 |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 32sans-atrisk-mail,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 30sans-atrisk-mail,