VendorsHashiCorpvault1.20.0
Vulnerabilities

HashiCorp Vault 1.20.0

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

6CVEs
CVE-2025-6000
Arbitrary Remote Code Execution via Plugin Catalog Abuse
Published 2025-08-01 · Analyzed
9.1EPSS 0.009
CVE-2025-6037
Vault Certificate Auth Method Did Not Validate Common Name For Non-CA Certificates
Published 2025-08-01 · Analyzed
6.8EPSS 0.002
CVE-2025-6014
Vault TOTP Secrets Engine Code Reuse
Published 2025-08-01 · Analyzed
6.5EPSS 0.004
CVE-2025-6015
Vault Login MFA Bypass of Rate Limiting and TOTP Code Reuse
Published 2025-08-01 · Analyzed
5.7EPSS 0.003
CVE-2025-6004
Vault Userpass and LDAP User Lockout Bypass
Published 2025-08-01 · Analyzed
5.3EPSS 0.004
CVE-2025-6011
Timing Side-Channel in Vault’s Userpass Auth Method
Published 2025-08-01 · Analyzed
3.7EPSS 0.003