LOW2.4
GO-2026-6554
OpenBao Agent Writes Secrets to Stdout in github.com/openbao/openbao
Quick fix
GO-2026-6554 — github.com/openbao/openbao: upgrade to the fixed version with the command below.
go get github.com/openbao/openbao@v0.0.0-20260714163218-90272575e5f5Details
OpenBao Agent Writes Secrets to Stdout in github.com/openbao/openbao
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/openbao/openbao
Introduced in:
0Fixed in: 0.0.0-20260714163218-90272575e5f5Fix
go get github.com/openbao/openbao@v0.0.0-20260714163218-90272575e5f5References
- https://github.com/openbao/openbao/security/advisories/GHSA-444v-8vxr-p36h[ADVISORY]
- https://github.com/openbao/openbao/commit/90272575e5f58b3883fbb0ccb2238e9285722d1a[FIX]
- https://github.com/openbao/openbao/commit/ee3aa4aff72c5176cf02af21eac7158899080878[FIX]
- https://github.com/openbao/openbao/pull/3494[FIX]
- https://github.com/openbao/openbao/pull/3495[FIX]
- https://github.com/openbao/openbao/releases/tag/v2.6.0[WEB]