What’s Vulnerable › Products

HashiCorp Boundary vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your HashiCorp Boundary version is affected

Latest HashiCorp Boundary vulnerabilities

• CVE-2026-13303 — Boundary vulnerable to server-side request forgery in Vault credential store (CVSS 8.7)
• CVE-2026-7776 — Boundary Workers Vulnerable to Denial of Service During TLS Handshake (CVSS 7.5)
• CVE-2024-12289 — Boundary Controller Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service (CVSS 5.9)
• CVE-2024-1052 — Boundary Vulnerable to Session Hijacking Through TLS Certificate Tampering (CVSS 8.0)
• CVE-2023-0690 — Boundary Workers Store Rotated Credentials in Plaintext Even When a Key Management Service Configured (CVSS 7.1)
• CVE-2022-36182 — (CVSS 6.1)
• CVE-2022-36130 — (CVSS 9.9)