OPENBAO maintainers have issued security updates for two critical vulnerabilities in the secrets-management platform. According to the available article content, the flaws could allow attackers to execute arbitrary code or create authentication tokens without authorisation, potentially putting enterprise secrets at risk.
The supplied article does not identify the vulnerabilities by CVE number, affected versions, technical exploitation method or patched versions. It states that administrators should apply the latest OpenBao updates, but the detailed mitigation guidance is behind a subscription paywall. No evidence of exploitation is provided in the accessible content.