OpenBao: Transit secrets engine crashes on key creation with `derived: true` for asymmetric key types

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-84ff0044db advisory.

    Update to upstream 2.5.5.  Also fixes CVE-2026-55770, CVE-2026-55774, CVE-2026-55775, and CVE-2026-55776.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-da7e499416 advisory.

    Update to upstream 2.5.5.  Also fixes CVE-2026-55770, CVE-2026-55774, CVE-2026-55775, and CVE-2026-55776.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  CVE-2026-55776


ID	Name	Product	Family	Severity
323130	Fedora 44 : openbao (2026-84ff0044db)	Nessus	Fedora Local Security Checks	low
323124	Fedora 43 : openbao (2026-da7e499416)	Nessus	Fedora Local Security Checks	low
443678	SCA: security update for github.com/openbao/openbao (GHSA-8w8f-r2xv-4q4j)	Tenable Cloud Security	SCA Checks	medium
443678	SCA: security update for github.com/openbao/openbao (GHSA-8w8f-r2xv-4q4j)	Tenable Self-Hosted Container Security	SCA Checks	medium

Detections

Analytics

CVE-2026-55776

medium

Tenable Plugins

low

low

medium

medium