TI-2025-05435 CVE-2025-6015 · GHSA-v6r4-35f9-9rpw
Vault Login MFA Bypass of Rate Limiting and TOTP Code Reuse
Priority LOW 26
Vault and Vault Enterprise’s (“Vault”) login MFA rate limits could be bypassed and TOTP tokens could be reused.
Vulnerabilities
6 records
TI-2025-05431 CVE-2025-6011 · GHSA-mwgr-84fv-3jh9
Timing Side-Channel in Vault’s Userpass Auth Method
Priority LOW 18
A timing side channel in Vault and Vault Enterprise’s (“Vault”) userpass auth method allowed an attacker to distinguish between existing and non-existing users, and potentially enumerate valid usernames for Vault’s Userp…
TI-2025-05425 CVE-2025-6004 · GHSA-qgj7-fmq2-6cc4
Vault Userpass and LDAP User Lockout Bypass
Priority LOW 30
Vault and Vault Enterprise’s (“Vault”) user lockout feature could be bypassed for Userpass and LDAP authentication methods.
TI-2025-05454 CVE-2025-6037 · GHSA-6c5r-4wfc-3mcx
Vault Certificate Auth Method Did Not Validate Common Name For Non-CA Certificates
Priority LOW 32
Vault and Vault Enterprise (“Vault”) TLS certificate auth method did not correctly validate client certificates when configured with a non-CA certificate as [+trusted certificate+|https://developer.hashicorp.com/vault/ap…
TI-2025-05434 CVE-2025-6014 · GHSA-qv3p-fmv3-9hww
Vault TOTP Secrets Engine Code Reuse
Priority LOW 29
Vault and Vault Enterprise’s (“Vault”) TOTP Secrets Engine code validation endpoint is susceptible to code reuse within its validity period.
TI-2025-05421 CVE-2025-6000 · GHSA-mr4h-qf9j-f665
Arbitrary Remote Code Execution via Plugin Catalog Abuse
Priority MEDIUM 43
A privileged Vault operator within the root namespace with write permission to {{sys/audit}} may obtain code execution on the underlying host if a plugin directory is set in Vault’s configuration.