OpenBao before 2.6.3 / 2.7.0-beta evaluated ACL policies against the raw request path, while several backends (policies, cert, userpass and kubernetes auth roles, PKI, workflows) resolve names canonically, for example case-insensitively or with whitespace and path segments normalized. A token restricted by a deny rule on a specific name could reach the same object through a non-canonical variant of its path and bypass the deny. Fixed in 2.6.3 and 2.7.0 (GHSA-fg5x-7whg-6c28).