CVE-2026-8715 | HashiCorp Vault Secrets Operator up to 1.4.x AppRole Authentication Configuration path traversal

A vulnerability classified as problematic was found in HashiCorp Vault Secrets Operator up to 1.4.x. Affected is an unknown function of the component AppRole Authentication Configuration. Executing a manipulation can lead to path traversal.

This vulnerability is tracked as CVE-2026-8715. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is advised.