HashiCorp Vault Enterprise

• CVE-2026-89322 High 7.2 Vault ACL Policy Evaluation May Allow Bypass of Deny Restrictions 0.3%
• CVE-2026-105820 Medium 5.4 Vault ACL Policy Cache Vulnerable to Cross-Namespace Policy Resolution 0.2%
• CVE-2026-105816 High 8.0 Vault Vulnerable to Arbitrary Code Execution via Plugin Catalog Entries Restored From Raft Snapshots 0.3%
• CVE-2026-105818 Medium 5.9 Vault PKI ACME Issues Certificate With Unvalidated SANs <0.1%
• CVE-2026-5006 Medium 6.8 Vault Vulnerable to Privilege Escalation via Slash Injection in Templated Policy Paths 0.3%
• CVE-2026-14886 High 8.2 Vault Enterprise vulnerable to cross-namespace entity deletion 0.3%
• CVE-2026-12624 Medium 4.3 Vault vulnerable to LIST authorization bypass via trailing-slash strip 0.3%
• CVE-2026-5051 Medium 4.4 Audit Log Plugin Directory Guard Bypass via Legacy path Option 0.4%
• CVE-2026-5807 High 7.5 Vault Vulnerable to Denial-of-Service via Unauthenticated Root Token Generation/Rekey Operations 0.7%
• CVE-2026-4525 High 7.5 Vault Token Leaked to Backends via Authorization: Bearer Passthrough Header 0.4%
• CVE-2026-5052 Medium 5.3 Vault Vulnerable to Server-Side Request Forgery in ACME Challenge Validation via Attacker-Controlled DNS 0.3%
• CVE-2026-3605 High 8.1 Vault KVv2 Metadata and Secret Deletion Policy Bypass Denial-of-Service 0.4%
• CVE-2025-12044 High 7.5 Vault Vulnerable to Denial of Service Due to Rate Limit Regression 0.5%
• CVE-2025-11621 High 8.1 Vault AWS auth method bypass due to AWS client cache 0.5%
• CVE-2025-6203 High 7.5 Vault unauthenticated denial of service through complex json payload 0.7%
• CVE-2025-6013 Medium 6.5 Vault LDAP MFA Enforcement Bypass When Using Username As Alias 0.5%
• CVE-2025-6015 Medium 5.7 Vault Login MFA Bypass of Rate Limiting and TOTP Code Reuse 0.4%
• CVE-2025-6011 Low 3.7 Timing Side-Channel in Vault’s Userpass Auth Method 0.4%
• CVE-2025-6004 Medium 5.3 Vault Userpass and LDAP User Lockout Bypass 0.5%
• CVE-2025-6037 Medium 6.8 Vault Certificate Auth Method Did Not Validate Common Name For Non-CA Certificates 0.3%
• CVE-2025-6014 Medium 6.5 Vault TOTP Secrets Engine Code Reuse 0.4%
• CVE-2025-6000 Critical 9.1 Arbitrary Remote Code Execution via Plugin Catalog Abuse 1.0%
• CVE-2025-5999 High 7.2 Vault Root Namespace Operator May Elevate Token Privileges 0.5%
• CVE-2025-4656 Low 3.1 Vault Vulnerable to Recovery Key Cancellation Denial of Service 0.3%
• CVE-2025-3879 Medium 6.6 Vault’s Azure Authentication Method bound_location Restriction Could be Bypassed on Login 0.4%
• CVE-2025-4166 Medium 4.5 Vault May Include Sensitive Data in Error Logs When Using the KV v2 Plugin 0.5%
• CVE-2024-8185 High 7.5 Vault Vulnerable to Denial of Service When Processing Raft Join Requests 0.5%
• CVE-2024-9180 High 7.2 Vault Operators in Root Namespace May Elevate Their Privileges 0.5%
• CVE-2024-7594 High 7.5 Vault SSH Secrets Engine Configuration Did Not Restrict Valid Principals By Default 0.3%
• CVE-2024-8365 Medium 6.2 Vault Leaks AppRole Client Tokens And Accessor in Audit Log 0.5%
• CVE-2024-6468 High 7.5 Vault Vulnerable to Denial of Service When Setting a Proxy Protocol Behavior 0.5%
• CVE-2024-5798 Low 2.6 Vault Incorrectly Validated JSON Web Tokens (JWT) Audience Claims 0.3%
• CVE-2024-2877 Medium 5.5 Vault Enterprise Leaks Sensitive HTTP Request Headers in the Audit Log When Deployed With a Performance Standby Node 0.2%
• CVE-2024-2660 Medium 6.4 Vault TLS Cert Auth Method Did Not Correctly Validate OCSP Responses 0.3%
• CVE-2024-2048 High 8.1 Vault Cert Auth Method Did Not Correctly Validate Non-CA Certificates 0.5%
• CVE-2024-0831 Medium 4.5 Vault May Expose Sensitive Information When Configuring An Audit Log Device 0.8%
• CVE-2023-6337 High 7.5 Vault May be Vulnerable to a Denial of Service Through Memory Exhaustion When Handling Large HTTP Requests 0.8%
• CVE-2023-5954 Medium 5.9 Vault Requests Triggering Policy Checks May Lead To Unbounded Memory Consumption 0.7%
• CVE-2023-5077 High 7.6 Vault's Google Cloud Secrets Engine Removed Existing IAM Conditions When Creating / Updating Rolesets 0.5%
• CVE-2023-3775 Medium 4.2 Vault Enterprise's Sentinel RGP Policies Allowed For Cross-Namespace Denial of Service 0.5%
• CVE-2023-4680 Medium 6.8 Vault's Transit Secrets Engine Allowed Nonce Specified without Convergent Encryption 0.4%
• CVE-2023-3462 Medium 5.3 Vault's LDAP Auth Method Allows for User Enumeration 0.6%
• CVE-2023-3774 Medium 4.9 Vault Enterprise Namespace Creation May Lead to Denial of Service 0.7%
• CVE-2023-2121 Medium 4.3 Vault’s KV Diff Viewer Allowed for HTML Injection 0.4%
• CVE-2023-2197 Low 2.5 Vault Enterprise Vulnerable to Padding Oracle Attacks When Using a CBC-based Encryption Mechanism with a HSM <0.1%
• CVE-2023-0620 Medium 6.5 Vault Vulnerable to SQL Injection When Configuring the Microsoft SQL Database Storage Backend 0.4%
• CVE-2023-0665 Medium 6.5 Vault PKI Issuer Endpoint Did Not Correctly Authorize Access to Issuer Metadata 0.3%
• CVE-2023-25000 Medium 5.0 Vault Vulnerable to Cache-Timing Attacks During Seal and Unseal Operations 0.2%
• CVE-2023-24999 Medium 4.4 Vault Fails to Verify if the AppRole SecretID Belongs to Role During a Destroy Operation 0.6%