PT-2025-43523 · Openbao · Openbao Aws Plugin

Published 2025-10-23 · Updated 2025-12-05 · CVE-2025-59048

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions OpenBao AWS Plugin versions prior to 0.1.1

Description The OpenBao AWS Plugin generates AWS access credentials based on IAM policies. Versions of the plugin prior to 0.1.1 are susceptible to cross-account IAM role Impersonation within the AWS auth method. This allows an IAM role from an untrusted AWS account to authenticate by assuming the identity of a role with the same name in a trusted account, potentially resulting in unauthorized access. This issue affects users of the auth-aws plugin operating in multi-account AWS environments where IAM role names are not uniquely assigned across accounts.

Recommendations Update to OpenBao AWS Plugin version 0.1.1 or later. Ensure IAM role names are unique across all AWS accounts that interact with your OpenBao environment. Audit for any duplicate IAM roles.

Exploit

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

CWE-694

Related Identifiers

CVE-2025-59048

GHSA-JP7H-4F3C-9RC7

GO-2025-4067

OPENSUSE-SU-2025:15710-1

Affected Products

Openbao Aws Plugin

References · 85

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/59xxx/CVE-2025-59048.json · Exploit
• https://github.com/openbao/openbao-plugins/security/advisories/GHSA-jp7h-4f3c-9rc7 · Vendor Advisory
• https://github.com/openbao/openbao-plugins/commit/2a77af36834746ca6d3ac9bd1049154c84b3efae · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2025:15710-1 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2025-4067 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-59048 · Security Note
• https://osv.dev/vulnerability/GHSA-jp7h-4f3c-9rc7 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-59048 · Vendor Advisory
• https://github.com/openbao/openbao-plugins · Note
• https://suse.com/security/cve/CVE-2016-11070 · Note
• https://suse.com/security/cve/CVE-2025-54287 · Note
• https://suse.com/security/cve/CVE-2025-62375 · Note
• https://suse.com/security/cve/CVE-2025-62513 · Note
• https://suse.com/security/cve/CVE-2025-59048 · Note
• https://suse.com/security/cve/CVE-2025-64101 · Note