What’s Vulnerable › Products
HashiCorp Vault vulnerabilities
80 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 27 published in the last 12 months.
Check whether your HashiCorp Vault version is affected
Latest HashiCorp Vault vulnerabilities
- CVE-2026-89322 — Vault ACL Policy Evaluation May Allow Bypass of Deny Restrictions (CVSS 7.2)
- CVE-2026-105820 — Vault ACL Policy Cache Vulnerable to Cross-Namespace Policy Resolution (CVSS 5.4)
- CVE-2026-105818 — Vault PKI ACME Issues Certificate With Unvalidated SANs (CVSS 5.9)
- CVE-2026-105816 — Vault Vulnerable to Arbitrary Code Execution via Plugin Catalog Entries Restored From Raft Snapshots (CVSS 8.0)
- CVE-2026-5006 — Vault Vulnerable to Privilege Escalation via Slash Injection in Templated Policy Paths (CVSS 6.8)
- CVE-2026-14886 — Vault Enterprise vulnerable to cross-namespace entity deletion (CVSS 8.2)
- CVE-2026-12624 — Vault vulnerable to LIST authorization bypass via trailing-slash strip (CVSS 4.3)
- CVE-2026-5051 — Audit Log Plugin Directory Guard Bypass via Legacy path Option (CVSS 4.4)
- CVE-2026-5807 — Vault Vulnerable to Denial-of-Service via Unauthenticated Root Token Generation/Rekey Operations (CVSS 7.5)
- CVE-2026-5052 — Vault Vulnerable to Server-Side Request Forgery in ACME Challenge Validation via Attacker-Controlled DNS (CVSS 8.6)
- CVE-2026-4525 — Vault Token Leaked to Backends via Authorization: Bearer Passthrough Header (CVSS 8.8)
- CVE-2026-3605 — Vault KVv2 Metadata and Secret Deletion Policy Bypass Denial-of-Service (CVSS 8.1)
- CVE-2025-12044 — Vault Vulnerable to Denial of Service Due to Rate Limit Regression (CVSS 7.5)
- CVE-2025-11621 — Vault AWS auth method bypass due to AWS client cache (CVSS 8.1)
- CVE-2025-6203 — Vault unauthenticated denial of service through complex json payload (CVSS 7.5)
- CVE-2025-6013 — Vault LDAP MFA Enforcement Bypass When Using Username As Alias (CVSS 8.1)
- CVE-2025-6037 — Vault Certificate Auth Method Did Not Validate Common Name For Non-CA Certificates (CVSS 6.8)
- CVE-2025-6015 — Vault Login MFA Bypass of Rate Limiting and TOTP Code Reuse (CVSS 5.7)
- CVE-2025-6014 — Vault TOTP Secrets Engine Code Reuse (CVSS 6.5)
- CVE-2025-6011 — Timing Side-Channel in Vault’s Userpass Auth Method (CVSS 3.7)
- CVE-2025-6004 — Vault Userpass and LDAP User Lockout Bypass (CVSS 5.3)
- CVE-2025-6000 — Arbitrary Remote Code Execution via Plugin Catalog Abuse (CVSS 9.1)
- CVE-2025-5999 — Vault Root Namespace Operator May Elevate Token Privileges (CVSS 7.2)
- CVE-2025-4656 — Vault Vulnerable to Recovery Key Cancellation Denial of Service (CVSS 3.1)
- CVE-2025-3879 — Vault’s Azure Authentication Method bound_location Restriction Could be Bypassed on Login (CVSS 8.8)