PT-2025-43523 · Openbao · Openbao Aws Plugin

Publicado

2025-10-23

·

Atualizado

2025-12-05

·

CVE-2025-59048

CVSS v3.1

8.1

Alta

VetorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions OpenBao AWS Plugin versions prior to 0.1.1
Description The OpenBao AWS Plugin generates AWS access credentials based on IAM policies. Versions of the plugin prior to 0.1.1 are susceptible to cross-account IAM role Impersonation within the AWS auth method. This allows an IAM role from an untrusted AWS account to authenticate by assuming the identity of a role with the same name in a trusted account, potentially resulting in unauthorized access. This issue affects users of the auth-aws plugin operating in multi-account AWS environments where IAM role names are not uniquely assigned across accounts.
Recommendations Update to OpenBao AWS Plugin version 0.1.1 or later. Ensure IAM role names are unique across all AWS accounts that interact with your OpenBao environment. Audit for any duplicate IAM roles.

Exploit

Correção

Incorrect Authorization

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-863CWE-694

Identificadores relacionados

CVE-2025-59048
GHSA-JP7H-4F3C-9RC7
GO-2025-4067
OPENSUSE-SU-2025:15710-1

Produtos afetados

Openbao Aws Plugin