Skip to contentHashicorp Vault Enterprise vulnerabilities
- hashicorp vault, vault enterprise +1 moreVault audit device prefix vulnerable to log injectionCVE-2026-933332.7 Low
- hashicorp vault, vault enterprise +1 moreVault vulnerable to ACL deny bypass via trailing slashCVE-2026-933356.5 Medium
- hashicorp vault, vault enterprise +1 moreVault integrated storage join may disclose server environment credentialsCVE-2026-927355.9 Medium
- hashicorp vault, vault enterprise +1 moreVault ACL Policy Evaluation May Allow Bypass of Deny RestrictionsCVE-2026-89322Fix available7.2 High
- hashicorp vault enterpriseVault ACL Policy Cache Vulnerable to Cross-Namespace Policy ResolutionCVE-2026-105820Fix available5.4 Medium
- hashicorp vault, vault enterprise +1 moreVault Vulnerable to Arbitrary Code Execution via Plugin Catalog Entries Restored From Raft SnapshotsCVE-2026-105816Fix available8.0 High
- hashicorp vault, vault enterprise +1 moreVault PKI ACME Issues Certificate With Unvalidated SANsCVE-2026-105818Fix available5.9 Medium
- hashicorp vault, vault enterprise +1 moreVault Vulnerable to Privilege Escalation via Slash Injection in Templated Policy PathsCVE-2026-5006Public exploitFix available6.8 Medium
- hashicorp vault enterpriseVault Enterprise vulnerable to cross-namespace entity deletionCVE-2026-14886Fix available8.2 High
- hashicorp vault, vault enterprise +1 moreVault vulnerable to LIST authorization bypass via trailing-slash stripCVE-2026-12624Fix available4.3 Medium
- hashicorp vault, vault enterprise +1 moreAudit Log Plugin Directory Guard Bypass via Legacy path OptionCVE-2026-5051Fix available4.4 Medium
- hashicorp vault, vault enterprise, red hat openshift container platform 4 +1 more +3 moreVault Vulnerable to Denial-of-Service via Unauthenticated Root Token Generation/Rekey OperationsCVE-2026-5807Fix available7.5 High
- hashicorp vault, vault enterprise, red hat openshift container platform 4 +1 more +3 moreVault Token Leaked to Backends via Authorization: Bearer Passthrough HeaderCVE-2026-4525Fix available7.5 High
- hashicorp vault, vault enterprise +1 moreVault Vulnerable to Server-Side Request Forgery in ACME Challenge Validation via Attacker-Controlled DNSCVE-2026-5052Fix available5.3 Medium
- hashicorp vault, vault enterprise, red hat openshift container platform 4 +1 more +3 moreVault KVv2 Metadata and Secret Deletion Policy Bypass Denial-of-ServiceCVE-2026-3605Fix available8.1 High
- hashicorp vault, vault enterprise +1 moreVault Vulnerable to Denial of Service Due to Rate Limit RegressionCVE-2025-12044Fix available7.5 High
- hashicorp vault, vault enterprise +1 moreVault AWS auth method bypass due to AWS client cacheCVE-2025-11621Fix available8.1 High
- hashicorp vault, vault enterprise +1 moreVault unauthenticated denial of service through complex json payloadCVE-2025-6203Fix available7.5 High
- hashicorp vault, vault enterprise +1 moreVault LDAP MFA Enforcement Bypass When Using Username As AliasCVE-2025-6013Fix available6.5 Medium
- hashicorp vault, vault enterprise +1 moreVault Login MFA Bypass of Rate Limiting and TOTP Code ReuseCVE-2025-6015Fix available5.7 Medium
- hashicorp vault, vault enterprise +1 moreTiming Side-Channel in Vault’s Userpass Auth MethodCVE-2025-6011Fix available3.7 Low
- hashicorp vault, vault enterprise +1 moreVault Userpass and LDAP User Lockout BypassCVE-2025-6004Fix available5.3 Medium
- hashicorp vault, vault enterprise +1 moreVault Certificate Auth Method Did Not Validate Common Name For Non-CA CertificatesCVE-2025-6037Fix available6.8 Medium
- hashicorp vault, vault enterprise +1 moreVault TOTP Secrets Engine Code ReuseCVE-2025-6014Fix available6.5 Medium
- hashicorp vault, vault enterprise +1 moreArbitrary Remote Code Execution via Plugin Catalog AbuseCVE-2025-6000Fix available9.1 Critical
- hashicorp vault, vault enterprise +1 moreVault Root Namespace Operator May Elevate Token PrivilegesCVE-2025-5999Fix available7.2 High
- hashicorp vault, vault enterprise +1 moreVault Vulnerable to Recovery Key Cancellation Denial of ServiceCVE-2025-4656Fix available3.1 Low
- hashicorp vault, vault enterprise +1 moreVault’s Azure Authentication Method bound_location Restriction Could be Bypassed on LoginCVE-2025-3879Fix available6.6 Medium
- hashicorp vault, vault enterprise, openbao +2 moreVault May Include Sensitive Data in Error Logs When Using the KV v2 PluginCVE-2025-4166Fix available4.5 Medium
- hashicorp vault, vault enterprise, openbao +2 moreVault Vulnerable to Denial of Service When Processing Raft Join RequestsCVE-2024-8185Fix available7.5 High
- hashicorp vault, vault enterprise, openbao +2 moreVault Operators in Root Namespace May Elevate Their PrivilegesCVE-2024-9180Fix available7.2 High
- hashicorp vault, vault enterprise, vault community edition +1 more +3 moreVault SSH Secrets Engine Configuration Did Not Restrict Valid Principals By DefaultCVE-2024-7594Fix available7.5 High
- hashicorp vault, vault enterprise +1 moreVault Leaks AppRole Client Tokens And Accessor in Audit LogCVE-2024-8365Fix available6.2 Medium
- hashicorp vault, vault enterprise +1 moreVault Vulnerable to Denial of Service When Setting a Proxy Protocol BehaviorCVE-2024-6468Fix available7.5 High
- hashicorp vault, vault enterprise +1 moreVault Incorrectly Validated JSON Web Tokens (JWT) Audience ClaimsCVE-2024-5798Fix available2.6 Low
- hashicorp vault, vault enterprise +1 moreVault Enterprise Leaks Sensitive HTTP Request Headers in the Audit Log When Deployed With a Performance Standby NodeCVE-2024-2877Fix available5.5 Medium
- hashicorp vault, vault enterprise +1 moreVault TLS Cert Auth Method Did Not Correctly Validate OCSP ResponsesCVE-2024-2660Fix available6.4 Medium
- hashicorp vault, vault enterprise, openbao +2 moreVault Cert Auth Method Did Not Correctly Validate Non-CA CertificatesCVE-2024-2048Fix available8.1 High
- hashicorp vault, vault enterprise +1 moreVault May Expose Sensitive Information When Configuring An Audit Log DeviceCVE-2024-0831Fix available4.5 Medium
- hashicorp vault, vault enterprise +1 moreVault May be Vulnerable to a Denial of Service Through Memory Exhaustion When Handling Large HTTP RequestsCVE-2023-6337Fix available7.5 High
- hashicorp vault, vault enterprise +1 moreVault Requests Triggering Policy Checks May Lead To Unbounded Memory ConsumptionCVE-2023-5954Fix available5.9 Medium
- hashicorp vault, vault enterprise +1 moreVault's Google Cloud Secrets Engine Removed Existing IAM Conditions When Creating / Updating RolesetsCVE-2023-5077Fix available7.6 High
- hashicorp vault, vault enterprise +1 moreVault Enterprise's Sentinel RGP Policies Allowed For Cross-Namespace Denial of ServiceCVE-2023-3775Fix available4.2 Medium
- hashicorp vault, vault enterprise +1 moreVault's Transit Secrets Engine Allowed Nonce Specified without Convergent EncryptionCVE-2023-4680Fix available6.8 Medium
- hashicorp vault, vault enterprise +1 moreVault's LDAP Auth Method Allows for User EnumerationCVE-2023-3462Fix available5.3 Medium
- hashicorp vault, vault enterprise +1 moreVault Enterprise Namespace Creation May Lead to Denial of ServiceCVE-2023-3774Fix available4.9 Medium
- hashicorp vault, vault enterprise +1 moreVault’s KV Diff Viewer Allowed for HTML InjectionCVE-2023-2121Fix available4.3 Medium
- hashicorp vault, vault enterprise +1 moreVault Enterprise Vulnerable to Padding Oracle Attacks When Using a CBC-based Encryption Mechanism with a HSMCVE-2023-2197Fix available2.5 Low
- hashicorp vault, vault enterprise +1 moreVault Vulnerable to SQL Injection When Configuring the Microsoft SQL Database Storage BackendCVE-2023-0620Fix available6.5 Medium
- hashicorp vault, vault enterprise +1 moreVault PKI Issuer Endpoint Did Not Correctly Authorize Access to Issuer MetadataCVE-2023-0665Fix available6.5 Medium
- Show olderLoading…