Skip to content
Hashicorp Vault vulnerabilities
-
hashicorp vault, vault enterprise +1 more
Vault ACL Policy Evaluation May Allow Bypass of Deny Restrictions
CVE-2026-89322
Fix available
7.2 High
-
hashicorp vault enterprise
Vault ACL Policy Cache Vulnerable to Cross-Namespace Policy Resolution
CVE-2026-105820
Fix available
5.4 Medium
-
hashicorp vault, vault enterprise +1 more
Vault Vulnerable to Arbitrary Code Execution via Plugin Catalog Entries Restored From Raft Snapshots
CVE-2026-105816
Fix available
8.0 High
-
hashicorp vault, vault enterprise +1 more
Vault PKI ACME Issues Certificate With Unvalidated SANs
CVE-2026-105818
Fix available
5.9 Medium
-
hashicorp vault, vault enterprise +1 more
Vault Vulnerable to Privilege Escalation via Slash Injection in Templated Policy Paths
CVE-2026-5006
Public exploitFix available
6.8 Medium
-
hashicorp vault enterprise
Vault Enterprise vulnerable to cross-namespace entity deletion
CVE-2026-14886
Fix available
8.2 High
-
hashicorp vault, vault enterprise +1 more
Vault vulnerable to LIST authorization bypass via trailing-slash strip
CVE-2026-12624
Fix available
4.3 Medium
-
hashicorp vault, vault enterprise +1 more
Audit Log Plugin Directory Guard Bypass via Legacy path Option
CVE-2026-5051
Fix available
4.4 Medium
-
hashicorp vault, vault enterprise, red hat openshift container platform 4 +1 more +3 more
Vault Vulnerable to Denial-of-Service via Unauthenticated Root Token Generation/Rekey Operations
CVE-2026-5807
Fix available
7.5 High
-
hashicorp vault, vault enterprise, red hat openshift container platform 4 +1 more +3 more
Vault Token Leaked to Backends via Authorization: Bearer Passthrough Header
CVE-2026-4525
Fix available
7.5 High
-
hashicorp vault, vault enterprise +1 more
Vault Vulnerable to Server-Side Request Forgery in ACME Challenge Validation via Attacker-Controlled DNS
CVE-2026-5052
Fix available
5.3 Medium
-
hashicorp vault, vault enterprise, red hat openshift container platform 4 +1 more +3 more
Vault KVv2 Metadata and Secret Deletion Policy Bypass Denial-of-Service
CVE-2026-3605
Fix available
8.1 High
-
hashicorp vault, vault enterprise +1 more
Vault Vulnerable to Denial of Service Due to Rate Limit Regression
CVE-2025-12044
Fix available
7.5 High
-
hashicorp vault, vault enterprise +1 more
Vault AWS auth method bypass due to AWS client cache
CVE-2025-11621
Fix available
8.1 High
-
hashicorp vault, vault enterprise +1 more
Vault unauthenticated denial of service through complex json payload
CVE-2025-6203
Fix available
7.5 High
-
hashicorp vault, vault enterprise +1 more
Vault LDAP MFA Enforcement Bypass When Using Username As Alias
CVE-2025-6013
Fix available
6.5 Medium
-
hashicorp vault, vault enterprise +1 more
Vault Login MFA Bypass of Rate Limiting and TOTP Code Reuse
CVE-2025-6015
Fix available
5.7 Medium
-
hashicorp vault, vault enterprise +1 more
Timing Side-Channel in Vault’s Userpass Auth Method
CVE-2025-6011
Fix available
3.7 Low
-
hashicorp vault, vault enterprise +1 more
Vault Userpass and LDAP User Lockout Bypass
CVE-2025-6004
Fix available
5.3 Medium
-
hashicorp vault, vault enterprise +1 more
Vault Certificate Auth Method Did Not Validate Common Name For Non-CA Certificates
CVE-2025-6037
Fix available
6.8 Medium
-
hashicorp vault, vault enterprise +1 more
Vault TOTP Secrets Engine Code Reuse
CVE-2025-6014
Fix available
6.5 Medium
-
hashicorp vault, vault enterprise +1 more
Arbitrary Remote Code Execution via Plugin Catalog Abuse
CVE-2025-6000
Fix available
9.1 Critical
-
hashicorp vault, vault enterprise +1 more
Vault Root Namespace Operator May Elevate Token Privileges
CVE-2025-5999
Fix available
7.2 High
-
hashicorp vault, vault enterprise +1 more
Vault Vulnerable to Recovery Key Cancellation Denial of Service
CVE-2025-4656
Fix available
3.1 Low
-
hashicorp vault, vault enterprise +1 more
Vault’s Azure Authentication Method bound_location Restriction Could be Bypassed on Login
CVE-2025-3879
Fix available
6.6 Medium
-
hashicorp vault, vault enterprise, openbao +2 more
Vault May Include Sensitive Data in Error Logs When Using the KV v2 Plugin
CVE-2025-4166
Fix available
4.5 Medium
-
hashicorp vault, vault enterprise, openbao +2 more
Vault Vulnerable to Denial of Service When Processing Raft Join Requests
CVE-2024-8185
Fix available
7.5 High
-
hashicorp vault, vault enterprise, openbao +2 more
Vault Operators in Root Namespace May Elevate Their Privileges
CVE-2024-9180
Fix available
7.2 High
-
hashicorp vault, vault enterprise, vault community edition +1 more +3 more
Vault SSH Secrets Engine Configuration Did Not Restrict Valid Principals By Default
CVE-2024-7594
Fix available
7.5 High
-
hashicorp vault, vault enterprise +1 more
Vault Leaks AppRole Client Tokens And Accessor in Audit Log
CVE-2024-8365
Fix available
6.2 Medium
-
hashicorp vault, vault enterprise +1 more
Vault Vulnerable to Denial of Service When Setting a Proxy Protocol Behavior
CVE-2024-6468
Fix available
7.5 High
-
hashicorp vault, vault enterprise +1 more
Vault Incorrectly Validated JSON Web Tokens (JWT) Audience Claims
CVE-2024-5798
Fix available
2.6 Low
-
hashicorp vault, vault enterprise +1 more
Vault Enterprise Leaks Sensitive HTTP Request Headers in the Audit Log When Deployed With a Performance Standby Node
CVE-2024-2877
Fix available
5.5 Medium
-
hashicorp vault, vault enterprise +1 more
Vault TLS Cert Auth Method Did Not Correctly Validate OCSP Responses
CVE-2024-2660
Fix available
6.4 Medium
-
hashicorp vault, vault enterprise, openbao +2 more
Vault Cert Auth Method Did Not Correctly Validate Non-CA Certificates
CVE-2024-2048
Fix available
8.1 High
-
hashicorp vault, vault enterprise +1 more
Vault May Expose Sensitive Information When Configuring An Audit Log Device
CVE-2024-0831
Fix available
4.5 Medium
-
hashicorp vault, vault enterprise +1 more
Vault May be Vulnerable to a Denial of Service Through Memory Exhaustion When Handling Large HTTP Requests
CVE-2023-6337
Fix available
7.5 High
-
hashicorp vault, vault enterprise +1 more
Vault Requests Triggering Policy Checks May Lead To Unbounded Memory Consumption
CVE-2023-5954
Fix available
5.9 Medium
-
hashicorp vault, vault enterprise +1 more
Vault's Google Cloud Secrets Engine Removed Existing IAM Conditions When Creating / Updating Rolesets
CVE-2023-5077
Fix available
7.6 High
-
hashicorp vault, vault enterprise +1 more
Vault Enterprise's Sentinel RGP Policies Allowed For Cross-Namespace Denial of Service
CVE-2023-3775
Fix available
4.2 Medium
-
hashicorp vault, vault enterprise +1 more
Vault's Transit Secrets Engine Allowed Nonce Specified without Convergent Encryption
CVE-2023-4680
Fix available
6.8 Medium
-
hashicorp vault, vault enterprise +1 more
Vault's LDAP Auth Method Allows for User Enumeration
CVE-2023-3462
Fix available
5.3 Medium
-
hashicorp vault, vault enterprise +1 more
Vault Enterprise Namespace Creation May Lead to Denial of Service
CVE-2023-3774
Fix available
4.9 Medium
-
hashicorp vault, vault enterprise +1 more
Vault’s KV Diff Viewer Allowed for HTML Injection
CVE-2023-2121
Fix available
4.3 Medium
-
hashicorp vault, vault enterprise +1 more
Vault Enterprise Vulnerable to Padding Oracle Attacks When Using a CBC-based Encryption Mechanism with a HSM
CVE-2023-2197
Fix available
2.5 Low
-
hashicorp vault, vault enterprise +1 more
Vault Vulnerable to SQL Injection When Configuring the Microsoft SQL Database Storage Backend
CVE-2023-0620
Fix available
6.5 Medium
-
hashicorp vault, vault enterprise +1 more
Vault PKI Issuer Endpoint Did Not Correctly Authorize Access to Issuer Metadata
CVE-2023-0665
Fix available
6.5 Medium
-
hashicorp vault, vault enterprise +1 more
Vault Vulnerable to Cache-Timing Attacks During Seal and Unseal Operations
CVE-2023-25000
Fix available
5.0 Medium
-
hashicorp vault, vault enterprise +1 more
Vault Fails to Verify if the AppRole SecretID Belongs to Role During a Destroy Operation
CVE-2023-24999
Fix available
4.4 Medium
-
hashicorp vault
HashiCorp Vault's revocation list not respected
CVE-2022-41316
Fix available
5.3 Medium
- Show olderLoading…