HashiCorp security advisory (AV26-1087)

Serial Number: AV26-1087
Date: October 26, 2026

As of October 26, 2026, HashiCorp is affected by a vulnerability in the following products:

• Consul
  • Prior to 2.1.0
• Consul Enterprise
  • Prior to 1.21.19
  • Prior to 2.1.0

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• HCSEC-2026-46 - Consul vulnerable to an authorization bypass in the agent's service mesh leaf certificate API
• Security - HashiCorp Discuss