Executive brief
OpenBao is Vulnerable to Privileged Operator Identity Group Root Escalation in github.com/openbao/openbao
Affected products
- Go github.com/openbao/openbao
Junglewise Threat Intelligence
CVE-2025-64761: GO-2025-4156 - OpenBao is Vulnerable to Privileged Operator Identity Group Root Escalation in github.com/openbao/openbao
CVE-2025-64761 · Severity: medium · CVSS 4 · Published 2025-11-25
Technologies: github.com/openbao/openbao (Go). Vendors: Go.
Related threats
- OpenBao Kerberos auth method orphaned token accumulation
- OpenBao sensitive information disclosure in audit logs
- OpenBao authorization bypass in sys/revoke and sys/renew endpoints
- OpenBao improper data removal during namespace deletion retry
- OpenBao's Token Store Allows Cross-Namespace Renewal, Revocation