OpenBao versions from 2.3.0 up to but not including 2.6.3 contain an incorrect authorization vulnerability in the ACL policy cache. This flaw allows tokens to reference policies from arbitrary namespaces via specially crafted policy names, enabling attackers to gain capabilities across namespace boundaries, including the root namespace.