backport of commit e29d98aadb (#22525)

Co-authored-by: Nick Cabatoff <ncabatoff@hashicorp.com>

api/client.go

@@ -524,7 +524,7 @@ func (c *Config) ParseAddress(address string) (*url.URL, error) {
 			// be pointing to the protocol used in the application layer and not to
 			// the transport layer. Hence, setting the fields accordingly.
 			u.Scheme = "http"
-			u.Host = socket
+			u.Host = "localhost"
 			u.Path = ""
 		} else {
 			return nil, fmt.Errorf("attempting to specify unix:// address with non-transport transport")

changelog/22523.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+api: Fix breakage with UNIX domain socket addresses introduced by newest Go versions as a security fix.
+```