High
Security advisory
HashiCorp Consul and Consul Enterprise 1.10.1 Raft RPC layer allows non-server agents with a valid certificate signed by the same CA to access server-only functionality, enabling privilege escalation. Fixed in 1.8.15, 1.9.9 and 1.10.2.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2021-37219
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 04:21 UTC · Revision 1
Source evidence
HashiCorp Consul and Consul Enterprise 1.10.1 Raft RPC layer allows non-server agents with a valid certificate signed by the same CA to access server-only functionality, enabling privilege escalation. Fixed in 1.8.15, 1.9.9 and 1.10.2.
osv:CVE-2021-37219
Complete source record
{
"id": "218cfd54eecaf9d4d755039899d1b27796af22d38d7d07d4590bf0418b83da8b",
"url": "https://osv.dev/vulnerability/CVE-2021-37219",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2021-37219",
"summary": "HashiCorp Consul and Consul Enterprise 1.10.1 Raft RPC layer allows non-server agents with a valid certificate signed by the same CA to access server-only functionality, enabling privilege escalation. Fixed in 1.8.15, 1.9.9 and 1.10.2.",
"evidence": "osv:CVE-2021-37219",
"products": [],
"severity": "high",
"structured": {
"id": "CVE-2021-37219",
"aliases": [
"BIT-consul-2021-37219",
"CVE-2021-37219",
"GHSA-ccw8-7688-vqx4",
"GO-2022-0593"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/hashicorp/consul",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"fixed": "a4f67ec2bffec430e6677dc5a449e89b9b56aa13"
},
{
"introduced": "a417fe51040a33039d3282e31c6c6b6f4fd1f886"
},
{
"fixed": "b0906b5bb0b6df6149aa1645d331030f5e85be30"
},
{
"introduced": "27de64da7095570012e9f8f7aec16aaf66d2a773"
},
{
"fixed": "3cb6eeedbda90aad6b387b89917971086d6cf6b5"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:hashicorp:consul:*:*:*:*:-:*:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "1.8.15"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:hashicorp:consul:*:*:*:*:enterprise:*:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "1.8.15"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:hashicorp:consul:*:*:*:*:-:*:*:*",
"range": [
{
"introduced": "1.9.0"
},
{
"fixed": "1.9.9"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:hashicorp:consul:*:*:*:*:enterprise:*:*:*",
"range": [
{
"introduced": "1.9.0"
},
{
"fixed": "1.9.9"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:hashicorp:consul:*:*:*:*:-:*:*:*",
"range": [
{
"introduced": "1.10.0"
},
{
"fixed": "1.10.2"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:hashicorp:consul:*:*:*:*:enterprise:*:*:*",
"range": [
{
"introduced": "1.10.0"
},
{
"fixed": "1.10.2"
}
],
"source": "CPE_RANGE"
}
]
}
}
],
"versions": [
"v1.10.1",
"v1.9.8",
"v1.8.14",
"v1.10.1-beta1",
"api/v1.9.1",
"v1.8.13",
"v1.9.7",
"v1.10.0-rc2",
"v1.10.0-rc",
"v1.10.0-beta4",
"v1.9.6",
"v1.8.12",
"v1.8.11-beta2",
"v1.10.0-beta2",
"v1.10.0-beta1",
"v1.9.5",
"v1.8.10",
"v1.9.4",
"v1.8.9",
"v1.8.9-beta1",
"v1.9.2",
"v1.9.1",
"api/v1.8.1",
"v1.8.7",
"v1.8.7-beta1",
"v1.8.4",
"api/v1.7.0",
"v1.8.3",
"sdk/v0.6.0",
"v1.8.0-beta2",
"v1.8.0-beta1",
"v1.7.0",
"sdk/v0.4.0",
"api/v1.4.0",
"v1.7.0-beta3",
"v1.7.0-beta2",
"v1.7.0-beta1",
"v1.6.1",
"v1.6.0",
"api/v1.2.0",
"sdk/v0.2.0",
"v1.5.3",
"v1.5.2",
"v1.5.1",
"v1.4.4",
"v1.5.0",
"api/v1.1.0",
"sdk/v0.1.1",
"api/v1.0.1",
"sdk/v0.1.0",
"api/v1.0.0",
"internal/v0.1.0",
"v1.4.3",
"v1.4.2",
"v1.4.1",
"v1.2.3",
"v1.1.0",
"v1.0.7",
"v0.9.3",
"v1.4.0",
"v1.4.0-rc1",
"v1.2.2",
"v1.2.1",
"v1.2.0",
"v1.0.6",
"v1.0.5",
"v1.0.4",
"v1.0.3",
"v1.0.2",
"v1.0.1",
"v1.0.1-rc1",
"v1.0.0",
"v1.0.0-beta2",
"v1.0.0-beta1",
"v0.9.3-rc2",
"v0.9.3-rc1",
"v0.9.2",
"v0.9.1",
"v0.9.0",
"v0.9.0-rc1",
"v0.8.5",
"v0.8.4",
"v0.8.2",
"v0.8.1",
"v0.8.0",
"v0.8.0-rc1",
"v0.7.4",
"v0.7.3",
"v0.7.2",
"v0.7.2-rc1",
"v0.7.1",
"v0.7.0",
"v0.7.0-rc2",
"v0.7.0-rc1",
"v0.6.4",
"v0.6.4-rc3",
"v0.6.3",
"v0.6.1",
"v0.6.0",
"v0.6.0-rc2",
"v0.6.0-rc1",
"v0.5.2",
"v0.5.1",
"v0.5.0",
"v0.5.0rc1",
"v0.4.1",
"v0.4.0",
"v0.3.1",
"v0.3.0",
"v0.2.1",
"v0.2.0",
"v0.1.0"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-37219.json"
}
}
],
"modified": "2026-10-24T10:30:17.711642244Z",
"provider": "osv",
"references": [
"https://discuss.hashicorp.com/t/hcsec-2021-22-consul-raft-rpc-privilege-escalation/29024",
"https://security.gentoo.org/glsa/202207-01",
"https://www.hashicorp.com/blog/category/consul"
],
"provider_metadata": {}
},
"related_cves": [
{
"value": "CVE-2021-37219",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 429621,
"published_at": "2021-09-07T12:15:07.727+00:00"
}