PT-2025-31660 · Hashicorp+2 · Vault Community Edition+3

Yarden Porat · Published 2025-08-01 · Updated 2025-10-01 · CVE-2025-5999

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Vault Community Edition versions prior to 1.20.0 Vault Enterprise versions prior to 1.20.0 Vault Enterprise version 1.19.6 Vault Enterprise version 1.18.11 Vault Enterprise version 1.16.22

Description A privileged Vault operator with write permissions to the root namespace’s identity endpoint could escalate their own or another user’s token privileges to Vault’s root policy.

Recommendations Update Vault Community Edition to version 1.20.0 or later. Update Vault Enterprise to version 1.20.0 or later. Update Vault Enterprise to version 1.19.6 or later. Update Vault Enterprise to version 1.18.11 or later. Update Vault Enterprise to version 1.16.22 or later.

Fix

LPE

Incorrect Privilege Assignment

Improper Privilege Management

Weakness Enumeration

CWE-266

CWE-269

Related Identifiers

ALT-PU-2025-12480

ALT-PU-2025-12489

BDU:2025-09565

BIT-VAULT-2025-5999

CVE-2025-5999

GHSA-6H4P-M86H-HHGH

GHSA-VF84-MXRQ-CRQC

GO-2025-3837

GO-2025-3857

OPENSUSE-SU-2025:15434-1

OPENSUSE-SU-2025:15460-1

SUSE-SU-2025:02912-1

Affected Products

Alt Linux

Red Os

Vault Community Edition

Vault Enterprise

References · 63

• https://nvd.nist.gov/vuln/detail/CVE-2025-5999 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:02912-1 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2025-3857 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2025-3837 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-54996 · Security Note
• https://osv.dev/vulnerability/CVE-2025-5999 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-6h4p-m86h-hhgh · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-09565 · Security Note
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/723800 · Security Note
• https://osv.dev/vulnerability/BIT-vault-2025-5999 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/cve-2025-5999 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/723808 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2025:15434-1 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-vf84-mxrq-crqc · Vendor Advisory