OpenBao versions from 2.3.0 up to but not including 2.6.3 have an improper authorization vulnerability in the plugin catalog APIs. This flaw allows privileged child-namespace tokens to modify plugin registrations because the /v1/sys/plugins/catalog/* endpoint is not restricted to the root namespace. Exploitation can lead to removal of existing plugin registrations, creation of invalid registrations, or unauthorized registration of installed plugins via a child namespace's sys/ mount, resulting in denial of service.