In Vault Community Edition versions 0.6.0 up to 1.20.4, and in Vault Enterprise versions 0.6.0 up to 1.20.4, 1.19.10, 1.18.15, and 1.16.26 a high severity vulnerability CVE-2025-11621 was detected. This vulnerability allows an attacker to bypass AWS authentication when the role of the configured bound_principal_iam is the same across AWS accounts or uses a wildcard. To address this issue, users should update to Vault Community Edition 1.21.0 or Vault Enterprise 1.21.0, 1.20.5, 1.19.11, or 1.16.27. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2025-11621.
Read more Security
In OpenVPN versions 2.7_alpha1 through 2.7_beta1 a high severity vulnerability CVE-2025-10680 was detected. This vulnerability allows a remote, authenticated OpenVPN server to inject and execute shell commands on POSIX-based clients via specially crafted DNS variables when the client is run with the –dns-updown option. To address this issue, users should upgrade OpenVPN to versions 2.7_beta2 or later (or otherwise avoid the vulnerable 2.7_alpha1–2.7_beta1 builds). For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2025-10680.
Read more Security
In Vault Community Edition versions 1.20.3 to 1.20.4, and in Vault Enterprise versions 1.20.3 to 1.20.4, 1.19.9 to 1.19.10, 1.18.14 to 1.18.15, and 1.16.25 to 1.16.26 a high severity vulnerability CVE-2025-12044 was detected. This vulnerability allows unauthenticated attackers to trigger a denial of service by sending specially crafted JSON payloads that bypass rate limits due to a regression from a previous fix. To address this issue, users should update to Vault Community Edition 1.21.0 or Vault Enterprise 1.16.27, 1.18.16, 1.19.11, 1.20.5, or 1.21.0. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2025-12044.
Read more Security
In Vault Community Edition versions prior to 1.20.3 and Vault Enterprise versions prior to 1.20.3, 1.19.9, 1.18.14 and 1.16.25 a high severity vulnerability CVE-2025-6203 was detected. This vulnerability allows an unauthenticated attacker to cause a denial of service by submitting a specially-crafted complex JSON payload that leads to excessive memory and CPU consumption. To address this issue, users should upgrade Vault Community Edition to versions 1.20.3 or Vault Enterprise to versions 1.20.3, 1.19.9, 1.18.14, 1.16.25 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2025-6203.
Read more Security
In Vault Community Edition versions from 1.10.0 up to 1.20.1 and Vault Enterprise versions from 1.10.0 up to 1.20.1, 1.19.7, 1.18.12, 1.16.23, 1.15.16 a medium severity vulnerability CVE-2025-6013 was found in the LDAP auth method. When username_as_alias was set to true, Vault could fail to enforce MFA if a user had multiple CNs that were identical except for leading or trailing spaces. This could allow an MFA bypass under certain conditions. To address this issue, users should upgrade Vault Community Edition to version 1.20.2 and Vault Enterprise versions 1.20.2, 1.19.8, 1.18.13 and 1.16.24. For more information, visit https://nvd.nist.gov/vuln/detail/CVE-2025-6013.
Read more Security
In Vault and Vault Enterprise versions prior to 1.20.1 (Community Edition), 1.19.7, 1.18.12 and 1.16.23 (Enterprise Edition) a medium severity vulnerability CVE-2025-6004 was detected. This vulnerability allows attackers to bypass the user lockout feature for Userpass and LDAP authentication methods. To address this issue, users should upgrade Vault Community Edition to versions 1.20.1 or Vault Enterprise to versions 1.20.1, 1.19.7, 1.18.12 or 1.16.23. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2025-6004.
Read more Security
In Vault and Vault Enterprise versions prior to 1.20.1 (Community Edition), 1.19.7, 1.18.12 and 1.16.23 (Enterprise Edition) a critical severity vulnerability CVE-2025-6000 was detected. This vulnerability allows a privileged Vault operator within the root namespace with write permission to {{sys/audit}} to execute arbitrary code on the underlying host if a plugin directory is configured. To address this issue, users should upgrade Vault Community Edition to versions 1.20.1 or Vault Enterprise to versions 1.20.1, 1.19.7, 1.18.12 or 1.16.23. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2025-6000.
Read more Security
In Vault and Vault Enterprise versions prior to 1.20.0 (Community Edition), 1.20.0, 1.19.6, 1.18.11 and 1.16.22 (Enterprise Edition) a high severity vulnerability CVE-2025-5999 was detected. This vulnerability allows a privileged Vault operator with write permissions to the root namespace’s identity endpoint to escalate their own or another user’s token privileges to Vault’s root policy. To address this issue, users should upgrade Vault Community Edition to versions 1.20.0 or Vault Enterprise to versions 1.20.0, 1.19.6, 1.18.11 or 1.16.22. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2025-5999.
Read more Security
In Vault and Vault Enterprise versions prior to 1.20.1 (Community Edition), 1.19.7, 1.18.12 and 1.16.23 (Enterprise Edition) a medium severity vulnerability CVE-2025-6037 was detected. This vulnerability allows attackers to craft malicious certificates to impersonate other users when a non-CA certificate is used as a trusted certificate in the TLS auth method. To address this issue, users should upgrade Vault Community Edition to version 1.20.1 or Vault Enterprise to versions 1.20.1, 1.19.7, 1.18.12 or 1.16.23. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2025-6037.
Read more Security