PT-2025-26866 · Openbao · Openbao

Cipherboy · Published 2025-06-25 · Updated 2025-08-12 · CVE-2025-52894

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: OpenBao versions prior to 2.3.0

Description: OpenBao is a software solution for managing, storing, and distributing sensitive data, including secrets, certificates, and keys. The issue allows an attacker to perform unauthenticated, unaudited cancellation of root rekey and recovery rekey operations, resulting in a denial of service.

Recommendations: For OpenBao versions prior to 2.3.0, manually set the configuration option disable unauthed rekey endpoints=true to deny these endpoints on global listeners. As a temporary workaround, if an active proxy or load balancer sits in front of OpenBao, consider denying requests to these endpoints from unauthorized IP ranges. Update to version 2.3.0 or later, where the issue is resolved.

Exploit

Fix

DoS

Missing Authentication

RCE

Weakness Enumeration

CWE-306

CWE-20

Related Identifiers

CVE-2025-52894

GHSA-PRPJ-RCHP-9J5H

GO-2025-3783

OPENSUSE-SU-2025:15254-1

OPENSUSE-SU-2025:15405-1

Affected Products

Openbao

References · 72

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/52xxx/CVE-2025-52894.json · Exploit
• https://github.com/openbao/openbao/security/advisories/GHSA-prpj-rchp-9j5h · Vendor Advisory
• https://github.com/openbao/openbao/commit/fe75468822a22a88318c6079425357a02ae5b77b · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-52894 · Security Note
• https://osv.dev/vulnerability/GHSA-prpj-rchp-9j5h · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-52894 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15405-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15254-1 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2025-3783 · Vendor Advisory
• https://github.com/openbao/openbao · Note
• https://github.com/openbao/openbao/releases/tag/v2.3.1 · Note
• https://suse.com/security/cve/CVE-2025-6233 · Note
• https://suse.com/security/cve/CVE-2024-44905 · Note
• https://suse.com/security/cve/CVE-2025-30086 · Note
• https://suse.com/security/cve/CVE-2025-0928 · Note