CVE-2025-6000
EUVD-2025-2338701.08.2025, 18:15
A privileged Vault operator within the root namespace with write permission to {{sys/audit}} may obtain code execution on the underlying host if a plugin directory is set in Vault’s configuration. Fixed in Vault Community Edition 1.20.1 and Vault Enterprise 1.20.1, 1.19.7, 1.18.12, and 1.16.23.Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| hashicorp | vault | 0.8.0 ≤ 𝑥 < 1.16.23 |
| hashicorp | vault | 0.8.0 ≤ 𝑥 < 1.20.1 |
| hashicorp | vault | 1.17.0 ≤ 𝑥 < 1.18.12 |
| hashicorp | vault | 1.19.0 ≤ 𝑥 < 1.19.7 |
| hashicorp | vault | 1.20.0 |
𝑥
= Vulnerable software versions