2026-04-21 · 2 min · BitNinja Team

CVE-2026-39946: SQL Injection Risk in OpenBao

Recently, a concerning security vulnerability, CVE-2026-39946, was identified in OpenBao, an open-source identity-based secrets management system. This vulnerability allows attackers to execute SQL injection through improperly quoted schema names in the PostgreSQL database sec...