← Back

CVE-2026-4525

nvd nist
Published: Apr 17, 2026Modified: Jul 15, 2026

JSON object

Loading...
8.8
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: NVD

Description

If a Vault auth mount is configured to pass through the "Authorization" header, and the "Authorization" header is used to authenticate to Vault, Vault forwarded the Vault token to the auth plugin backend. Fixed in 2.0.0, 1.21.5, 1.20.10, and 1.19.16.

Affected (4)

Products: Hashicorp: Vault
Hashicorp
1 product
Vault
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Hashicorp
Vault
From 0.11.2 to 2.0.0
Vault
From 0.11.2 to 1.19.16
Vault
From 1.20.0 to 1.20.10
Vault
From 1.21.0 to 1.21.5

Related CWEs

CWE-201
Insertion of Sensitive Information Into Sent Data
The code transmits data to another actor, but a portion of the data includes sensitive information that should not be accessible to that actor.

References (4)

Source: security@hashicorp.com
Vendor Advisory
Source: 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
Source: 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
Source: 0b0ca135-0b70-47e7-9f44-1890c2a1c46c

Timeline

No history available yet.