What’s Vulnerable › Vulnerabilities

CVE-2023-3774: Vault Enterprise Namespace Creation May Lead to Denial of Service

• Severity: medium (CVSS 4.9 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-07-28 · updated 2026-06-17
• Weakness: CWE-248

Description

An unhandled error in Vault Enterprise's namespace creation may cause the Vault process to crash, potentially resulting in denial of service. Fixed in 1.14.1, 1.13.5, and 1.12.9.

Affected products

• HashiCorp Vault: 1.12.8, 1.13.4, 1.14.0

References

• https://discuss.hashicorp.com/t/hcsec-2023-23-vault-enterprise-namespace-creation-may-lead-to-denial-of-service/56617
• https://discuss.hashicorp.com/t/hcsec-2023-23-vault-enterprise-namespace-creation-may-lead-to-denial-of-service/56617

Get alerted when CVE-2023-3774 or the next vulnerability affects your stack