OpenBao versions before 2.6.4 and 2.7.0 before 2.7.1 have a vulnerability in the rate limit quota subsystem. The flaw causes role resolution to fail for requests with form-encoded bodies or forwarded certificates, allowing quota rules scoped to backend-specific roles to be bypassed. This enables valid callers to repeatedly issue tokens without consuming their configured role-based rate limit budget.