CVE-2026-55775: OpenBao's System Backend allows Unauthorized Management of the containing Namespace

June 19, 2026

A user that is granted namespace management (/sys/namespaces) capabilities within a non-root namespace (“the victim namespace”) can abuse special handling of the literal path "root" in namespace path canonicalization to manage the victim namespace itself.

References

github.com/advisories/GHSA-mwr2-wmgp-crj6
github.com/openbao/openbao/commit/d3c1cc64b1ae7f9868b5c3e80b8b11671f0d97ae
github.com/openbao/openbao/releases/tag/v2.5.5
github.com/openbao/openbao/security/advisories/GHSA-mwr2-wmgp-crj6
nvd.nist.gov/vuln/detail/CVE-2026-55775

Code Behaviors & Features

Detect and mitigate CVE-2026-55775 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →