CVE-2022-36130: Hashicorp Boundary

Critical severity, CVSS 9.9. EPSS: 0.5% chance of exploitation in the next 30 days.

HashiCorp Boundary up to 0.10.1 did not properly perform data integrity checks to ensure the resources were associated with the correct scopes, allowing potential privilege escalation for authorized users of another scope. Fixed in Boundary 0.10.2.

Affected products

• Hashicorp Boundary: before 0.10.2 (fixed in 0.10.2)

Published 2022-09-01. Last modified 2026-06-17.