Boundary
7 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Boundary, a product in the cloud saas space. Use it to gauge the current risk picture and drill into individual advisories.
Boundary CVEs per month
| Month | CVEs |
|---|---|
| 2024-11 | 0 |
| 2024-12 | 1 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 1 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 0 |
| 2026-10 | 1 |
Severity
How the 7 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical1
- High3
- Medium3
Latest CVEs
The 7 most recently published vulnerabilities affecting Boundary.
- CVE-2026-13303Boundary vulnerable to server-side request forgery in Vault credential store8.7
- CVE-2026-7776Boundary Workers Vulnerable to Denial of Service During TLS Handshake7.5
- CVE-2024-12289Boundary Controller Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service5.9
- CVE-2024-1052Boundary Vulnerable to Session Hijacking Through TLS Certificate Tampering8.0
- CVE-2023-0690Boundary Workers Store Rotated Credentials in Plaintext Even When a Key Management Service Configured5.0
- CVE-2022-36182Hashicorp Boundary v0.8.0 is vulnerable to Clickjacking which allow for the interception of login credentials, re-direction of users to malicious sites, or causing users to perform malicious action...6.1
- CVE-2022-36130HashiCorp Boundary up to 0.10.1 did not properly perform data integrity checks to ensure the resources were associated with the correct scopes, allowing potential privilege escalation for authorize...9.9
Product grouping is registry-driven, with AI assist and human review. How it works