CVE-2021-38698: Hashicorp Consul

Medium severity, CVSS 6.5. EPSS: 1.4% chance of exploitation in the next 30 days.

HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. Fixed in 1.8.15, 1.9.9 and 1.10.2.

Affected products

• Hashicorp Consul: before 1.8.15 (fixed in 1.8.15); from 1.9.0, before 1.9.9 (fixed in 1.9.9); from 1.10.0, before 1.10.2 (fixed in 1.10.2)

Published 2021-09-07. Last modified 2026-06-17.