HashiCorp Consul

by HashiCorpv2.0.4

Last updated Sep 11, 2026

A distributed, highly available, and data center aware solution to connect and configure applications across dynamic, distributed infrastructure.

Visit homepage

Install with winget

$ winget install --id Hashicorp.Consul --exact --version 2.0.4

Run in Command Prompt, PowerShell, or Windows Terminal. Prompts for any agreements.

Built by Pckgr

For Intune admins

Stop chasing app updates. Pckgr patches them for you.

Automated application patching for Microsoft Intune. Pckgr keeps a curated library of 1,000+ apps continuously up-to-date in your tenant via Microsoft Graph - no manual repackaging, no chasing vendor sites.

Start free 30-day trial

No credit card required.

About

Consul is a distributed, highly available, and data center aware solution to connect and configure applications across dynamic, distributed infrastructure.

Consul provides several key features:

- Multi-Datacenter - Consul is built to be datacenter aware, and can support any number of regions without complex configuration.

- Service Mesh - Consul Service Mesh enables secure service-to-service communication with automatic TLS encryption and identity-based authorization. Applications can use sidecar proxies in a service mesh configuration to establish TLS connections for inbound and outbound connections with Transparent Proxy.

- API Gateway - Consul API Gateway manages access to services within Consul Service Mesh, allow users to define traffic and authorization policies to services deployed within the mesh.

- Service Discovery - Consul makes it simple for services to register themselves and to discover other services via a DNS or HTTP interface. External services such as SaaS providers can be registered as well.

- Health Checking - Health Checking enables Consul to quickly alert operators about any issues in a cluster. The integration with service discovery prevents routing traffic to unhealthy hosts and enables service level circuit breakers.

- Dynamic App Configuration - An HTTP API that allows users to store indexed objects within Consul, for storing configuration parameters and application metadata.

Installers · v2.0.4

Architecture	Type	Scope	Install	Download
x86	ZIP archive	-		Direct
x64	ZIP archive	-		Direct

Copy a command tailored to that specific architecture, type, and scope - useful when winget would otherwise pick a different default.

Security

25 known CVEs via NVD

medium6.5Patched in wingetCVE-2025-11375affects before 1.18.12, 1.20.8, 1.21.6, 1.22.0Oct 28, 2025
Consul and Consul Enterprise’s (“Consul”) event endpoint is vulnerable to denial of service (DoS) due to lack of maximum value on the Content Length header. This vulnerability, CVE-2025-11375, is fixed in Consul Community Edition 1.22.0 and Consul Enterprise 1.22.0, 1.21.6, 1.20...
Vendor advisory
medium6.5Patched in wingetCVE-2025-11374affects before 1.18.12, 1.20.8, 1.21.6, 1.22.0Oct 28, 2025
Consul and Consul Enterprise’s (“Consul”) key/value endpoint is vulnerable to denial of service (DoS) due to incorrect Content Length header validation. This vulnerability, CVE-2025-11374, is fixed in Consul Community Edition 1.22.0 and Consul Enterprise 1.22.0, 1.21.6, 1.20.8 a...
Vendor advisory
medium6.1Patched in wingetCVE-2024-10086affects before 1.15.15, 1.18.5, 1.19.3, 1.20.0Oct 30, 2024
A vulnerability was identified in Consul and Consul Enterprise such that the server response did not explicitly set a Content-Type HTTP header, allowing user-provided inputs to be misinterpreted and lead to reflected XSS.
Vendor advisory
high8.3Patched in wingetCVE-2024-10006affects before 1.15.15, 1.18.5, 1.19.3, 1.20.1Oct 30, 2024
A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that using Headers in L7 traffic intentions could bypass HTTP header based access rules.
Vendor advisory
high8.1Patched in wingetCVE-2024-10005affects before 1.15.15, 1.18.5, 1.19.3, 1.20.1Oct 30, 2024
A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that using URL paths in L7 traffic intentions could bypass HTTP request path-based access rules.
Vendor advisory
medium5.9Patched in wingetCVE-2023-5332affects before 0.9.4, 1.0.8, 1.2.4Dec 3, 2023
Patch in third party library Consul requires 'enable-script-checks' to be set to False. This was required to enable a patch by the vendor. Without this setting the patch could be bypassed. This only affects GitLab-EE.
Patch Vendor advisory
high7.4Patched in wingetCVE-2023-3518affects v1.16.0Aug 9, 2023
HashiCorp Consul and Consul Enterprise 1.16.0 when using JWT Auth for service mesh incorrectly allows/denies access regardless of service identities. Fixed in 1.16.1.
Vendor advisory
high8.7Patched in wingetCVE-2023-2816affects before 1.15.3Jun 2, 2023
Consul and Consul Enterprise allowed any user with service:write permissions to use Envoy extensions configured via service-defaults to patch remote proxy instances that target the configured service, regardless of whether the user has permission to modify the service(s) corresp...
Vendor advisory

Showing 8 of 25. Source: NVD, updated 6h ago. Patch status is best-effort: NVD's fix version is compared against the latest version in winget, but the two version formats don't always align. Confirm with the vendor advisory before treating any specific build as safe.

See a CVE that affects your fleet? Push the patched version to Intune in one click with Pckgr - automated patching is the only way to keep up.

Related apps

H
HashiCorp TerraformHashiCorp
Hashicorp.Terraformv1.16.2
A tool for building, changing, and versioning infrastructure safely and efficiently.
VagrantHashiCorp
Hashicorp.Vagrantv2.4.9
Build and manage virtual machine environments in a single workflow
H
HashiCorp NomadHashiCorp
Hashicorp.Nomadv2.0.6
An easy-to-use, flexible, and performant workload orchestrator that can deploy a mix of microservice, batch, containerized, and non-containerized applications.
H
HashiCorp Terraform Language ServerHashiCorp
Hashicorp.TerraformLanguageServerv0.39.0
Optional component for Terraform implementing the Language Server Protocol.
HashiCorp PackerHashiCorp
Hashicorp.Packerv1.16.0
A tool for creating identical machine images for multiple platforms from a single source configuration.
H
HashiCorp BoundaryHashiCorp
Hashicorp.Boundaryv0.21.3
An identity-aware proxy that provides a simple, secure way to access hosts and critical systems on your network.

More from HashiCorp or browse api-gateway, ecs, kubernetes.

Frequently asked questions

How do I install HashiCorp Consul on Windows?

Open Windows Terminal, PowerShell, or Command Prompt and run: winget install --id Hashicorp.Consul --exact --version 2.0.4. winget downloads the installer from HashiCorp and runs it. Requires Windows 10 (1809+) or Windows 11.

How do I install HashiCorp Consul silently for unattended deployment?

Add --silent and accept the agreements upfront: winget install --id Hashicorp.Consul --exact 2.0.4 --silent --accept-package-agreements --accept-source-agreements. This is the variant Intune, Configuration Manager, and other deployment tools should use.

How do I uninstall HashiCorp Consul via winget?

Run: winget uninstall --id Hashicorp.Consul --exact. Add --silent for unattended uninstalls. winget will use the registered uninstaller from HashiCorp Consul's Apps & Features entry.

Is HashiCorp Consul free?

HashiCorp Consul is distributed under BUSL-1.1. Refer to the publisher (https://github.com/hashicorp/consul) for the full license terms - Wingetly itself does not charge for installation.

Does HashiCorp Consul work on Windows 10?

Yes, as long as your Windows 10 build supports winget (1809 or newer). winget ships with App Installer on Windows 10/11 and pulls HashiCorp Consul directly from the publisher.

How do I keep HashiCorp Consul up to date?

Run winget upgrade --id Hashicorp.Consul --exact, or winget upgrade --all to update everything winget tracks. We index 10 versions of HashiCorp Consul from microsoft/winget-pkgs.

Recent versions

2.0.4latest
2.0.3
2.0.2
2.0.1
2.0.0
1.22.7
1.22.6
1.22.5
1.22.4
1.22.3