PT-2025-31662 · Hashicorp+1 · Vault Enterprise+2

Yarden Porat · CVE-2025-6014 · Published 2025-08-01 · Updated 2025-09-05

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Vault versions prior to 1.20.1 Vault Enterprise versions prior to 1.20.1 Vault Enterprise version 1.19.7 Vault Enterprise version 1.18.12 Vault Enterprise version 1.16.23

Description The Time-based One-Time Password (TOTP) Secrets Engine in Vault and Vault Enterprise is susceptible to code reuse within its validity period due to an issue with the code validation endpoint.

Recommendations Update Vault to version 1.20.1 or later. Update Vault Enterprise to version 1.20.1 or later. Update Vault Enterprise to version 1.19.7 or later. Update Vault Enterprise to version 1.18.12 or later. Update Vault Enterprise to version 1.16.23 or later.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-156

CWE-287

Related Identifiers

BDU:2025-11261

BIT-VAULT-2025-6014

CVE-2025-6014

GHSA-F7C3-MHJ2-9PVG

GHSA-QV3P-FMV3-9HWW

GO-2025-3841

GO-2025-3853

OPENSUSE-SU-2025:15434-1

OPENSUSE-SU-2025:15460-1

SUSE-SU-2025:02912-1

Affected Products

Red Os

Vault

Vault Enterprise

References · 55

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/6xxx/CVE-2025-6014.json · Exploit
• https://osv.dev/vulnerability/CVE-2025-6014 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02912-1 · Vendor Advisory
• https://discuss.hashicorp.com/t/hcsec-2025-17-vault-totp-secrets-engine-code-reuse/76036 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-qv3p-fmv3-9hww · Vendor Advisory
• https://osv.dev/vulnerability/GO-2025-3853 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-f7c3-mhj2-9pvg · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-11261 · Security Note
• https://osv.dev/vulnerability/BIT-vault-2025-6014 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2025-3841 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15460-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-55000 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-6014 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2025:15434-1 · Vendor Advisory
• https://github.com/hashicorp/vault · Note