Threats tagged 'ghsa-ff4v-fpcj-mjf6'

HashiCorp Boundary and Boundary Enterprise contain a server-side request forgery (SSRF) vulnerability in the Vault credential store integration. An authenticated user with permissions to manage credential stores and credential libraries within a project can exploit this flaw to make the Boundary controller send outbound requests to arbitrary network destinations and receive the responses. This could expose internal endpoints accessible only from the controller's host, such as cloud instance metadata services. The vulnerability is identified as CVE-2026-13303 and has a high severity rating. It is fixed in Boundary Enterprise versions 1.0.2 and 0.21.6.