Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.8
Consul on Unix can let attackers read files
published 1 month ago
Summary
The Consul software for Unix systems may allow an attacker to open and view files they should not access. This could expose sensitive information stored on your servers. Apply the latest security updates for Consul as soon as possible to close the risk.
What to do
- Update cleanstart consul to version 1.20.6-r1.
- Update cleanstart consul to version 1.21.5-r6.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | consul |
< 1.20.6-r1 < 1.21.5-r6 Fix: upgrade to 1.20.6-r1
|
Original advisory text
On Unix systems, opening a file in an os
CVE-2026-39822 affects multiple packages. On Unix systems, opening a file in an os. See references for individual vulnerability details.
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Timeline
Published2 Oct 2026
Updated2 Oct 2026
First seen2 Oct 2026
Sources
CLEANSTART-2026-HH66974 · OSV
Track software like this
Free during beta