PT-2025-29612 · Cyberark · Secrets Manager+1

Shahar Tal + 1 · Published 2025-07-15 · Updated 2026-01-22 · CVE-2025-49827

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Conjur OSS versions 1.19.5 through 1.22.0 Secrets Manager, Self-Hosted versions 13.1 through 13.6

Description Conjur provides secrets management and application identity for infrastructure. A malformed regular expression allows an attacker manipulating headers signed by AWS to redirect the authentication validation request sent by Secrets Manager, Self-Hosted to a malicious server. This redirection could bypass the IAM Authenticator, granting the attacker permissions granted to the client whose request was manipulated.

Recommendations Conjur OSS version 1.22.1 or later Secrets Manager, Self-Hosted version 13.5.1 or later Secrets Manager, Self-Hosted version 13.6.1 or later

Exploit

Fix

Weakness Enumeration

CWE-807

Related Identifiers

CVE-2025-49827

GHSA-GMC5-9MPC-XG75

Affected Products

Conjur Oss

Secrets Manager

References · 13

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/49xxx/CVE-2025-49827.json · Exploit
• https://github.com/cyberark/conjur/security/advisories/GHSA-gmc5-9mpc-xg75 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-49827 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-49827 · Security Note
• https://github.com/cyberark/conjur/releases/tag/v1.22.1 · Note
• https://t.me/true_secator/7307 · Telegram Post
• https://twitter.com/CVEnew/status/1945207886537187537 · Twitter Post
• http://openwall.com/lists/oss-security/2025/08/08/1 · Note
• https://twitter.com/ghumare64/status/2014246710038732929 · Twitter Post
• https://twitter.com/CCBalert/status/1953829906837590093 · Twitter Post
• https://twitter.com/offseq/status/1945317584020132277 · Twitter Post
• https://t.me/cveNotify/135315 · Telegram Post
• http://openwall.com/lists/oss-security/2025/07/16/7 · Note