What is CVE-2026-87993?

CVE-2026-87993 is a high-severity vulnerability in Hashicorp Tooling, classified under Insertion of Sensitive Information into Log File. CVSS score: 7.7/10. Published 2026-09-10.

How severe is CVE-2026-87993?

High severity. CVSS v3 base score is 7.7 out of 10.

Information disclosure in Hashicorp Tooling

CVE-2026-87993

The consul-template library is vulnerable to an information disclosure issue in its error handling path that may allow Vault secret values to appear in template error messages, log output, and downstream surfaces such as Nomad task events. This vulnerability (CVE-2026-87993) is fixed in consul-template 0.43.0.

CVSS v3 metric

CVSS v3 base score 7.7 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N.

Affected products

Hashicorp Tooling

Weakness classification (CWE)

CWE-532 — Insertion of Sensitive Information into Log File

References

security@hashicorp.com

Frequently asked questions

What is CVE-2026-87993?: CVE-2026-87993 is a high-severity vulnerability in Hashicorp Tooling, classified under Insertion of Sensitive Information into Log File. CVSS score: 7.7/10. Published 2026-09-10.
How severe is CVE-2026-87993?: High severity. CVSS v3 base score is 7.7 out of 10.