CVE-2026-5061 — Consul-template vulnerable to sandbox path bypass in file helper via a symlink attack
The consul-template library before version 0.42.0 is vulnerable to a sandbox path bypass in the file template helper that may allow reading an out-of-sandbox file. This vulnerab…
Published: 2026-05-12 · CVSS: 4.7 · CVSS 3.1
The consul-template library before version 0.42.0 is vulnerable to a sandbox path bypass in the file template helper that may allow reading an out-of-sandbox file. This vulnerability (CVE-2026-5061) is fixed in consul-template 0.42.0.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7