OpenBao's System Backend allows Unauthorized Management of the containing Namespace

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-84ff0044db advisory.

    Update to upstream 2.5.5.  Also fixes CVE-2026-55770, CVE-2026-55774, CVE-2026-55775, and CVE-2026-55776.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-da7e499416 advisory.

    Update to upstream 2.5.5.  Also fixes CVE-2026-55770, CVE-2026-55774, CVE-2026-55775, and CVE-2026-55776.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  CVE-2026-55775


ID	Name	Product	Family	Severity
323130	Fedora 44 : openbao (2026-84ff0044db)	Nessus	Fedora Local Security Checks	low
323124	Fedora 43 : openbao (2026-da7e499416)	Nessus	Fedora Local Security Checks	low
443695	SCA: security update for github.com/openbao/openbao (GHSA-mwr2-wmgp-crj6)	Tenable Cloud Security	SCA Checks	low
443695	SCA: security update for github.com/openbao/openbao (GHSA-mwr2-wmgp-crj6)	Tenable Self-Hosted Container Security	SCA Checks	low

Detections

Analytics

CVE-2026-55775

low

Tenable Plugins

low

low

low

low