Is CVE-2026-105608 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-105608?

CVE-2026-105608 has a CVSS v3 severity of HIGH (8.8).

Back

CVE-2026-105608

Description

HashiCorp Consul and Consul Enterprise are vulnerable to an authorization bypass in service mesh proxy registration. This may allow a user with service write permission to apply Envoy escape-hatch configuration without the required mesh write permission. This vulnerability (CVE-2026-105608) is fixed in Consul Community Edition 2.1.0 and Consul Enterprise 2.1.0 and 1.21.19.