Patch CVE-2026-110720 now. This 9.9 CVSS consul-k8s vulnerability enables a cross-namespace authorization bypass in ACL binding rules.
HashiCorp
A Vault Secrets Operator vulnerability, CVE-2026-8715, lets tenants read pod files and gain privilege escalation. Patch to 1.5.0 now.
A critical Terraform MCP Server flaw, CVE-2026-16498, hits CVSS 10.0. Three bugs risk Terraform token theft and cross-tenant reuse. Upgrade to 1.1.0.
IBM completes acquisition of HashiCorp, enhancing its capabilities in hybrid cloud and AI for modern IT solutions.
Learn about the CMA investigation into IBM's acquisition of HashiCorp and its potential impact on market competition.
IBM has announced its definitive agreement to acquire HashiCorp Inc., a leader in multi-cloud infrastructure automation
HashiCorp has issued an urgent security advisory regarding a critical vulnerability (CVE-2024-3817) within its widely used go-getter library