⬇ Download holy card: ·
Saint Vault Fault
Hagiography in preparation at the scriptorium.
Feast day August 6
Technical record
- Disclosed on
- August 6 2025
- CVE
- CVE-2025-6000CVE-2025-5999CVE-2025-6004CVE-2025-6010CVE-2025-6011CVE-2025-6013CVE-2025-6014CVE-2025-6016CVE-2025-6037CVE-2025-49827CVE-2025-49831CVE-2025-49828CVE-2025-49830CVE-2025-49829
- CVSS
- 9.1
- Product
- HashiCorp · Vault
A privileged Vault operator within the root namespace with write permission to {{sys/audit}} may obtain code execution on the underlying host if a plugin directory is set in Vault’s configuration. Fixed in Vault Community Edition 1.20.1 and Vault Enterprise 1.20.1, 1.19.7, 1.18.12, and 1.16.23.
Sources: cyata.ai