PT-2025-43548 · Hashicorp+1 · Vault+2

Pavlos Karakalidis · Published 2025-10-23 · Updated 2025-12-29 · CVE-2025-11621

Positive Technologies (AI Summary)

CVSS v2.0

8.5

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions Vault versions prior to 1.21.0 Vault Enterprise versions prior to 1.21.0, 1.20.5, 1.19.11, and 1.16.27

Description The AWS Auth method in Vault and Vault Enterprise may allow authentication bypass if the bound principal iam role is identical across multiple AWS accounts or utilizes a wildcard character. This can potentially lead to unauthorized access.

Recommendations Update Vault to version 1.21.0 or later. Update Vault Enterprise to version 1.21.0, 1.20.5, 1.19.11, or 1.16.27 or later.

Fix

Authentication Bypass Using an Alternate Path or Channel

Weakness Enumeration

CWE-288

Related Identifiers

BDU:2025-15600

BIT-VAULT-2025-11621

CVE-2025-11621

GHSA-9G4H-H484-3578

GO-2025-4070

OPENSUSE-SU-2025:15710-1

Affected Products

Red Os

Vault

Vault Enterprise

References · 94

• https://discuss.hashicorp.com/t/hcsec-2025-30-vault-aws-auth-method-authentication-bypass-through-mishandling-of-cache-entries/76709 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-15600 · Security Note
• https://osv.dev/vulnerability/BIT-vault-2025-11621 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2025-4070 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-9g4h-h484-3578 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-11621 · Security Note
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-11621 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15710-1 · Vendor Advisory
• https://github.com/hashicorp/vault · Note
• https://github.com/hashicorp/vault/commit/8d07273d14ae7f5a48cc96f66cc86615dea83390 · Note
• https://twitter.com/cracbot/status/1983126653858656563 · Twitter Post
• https://suse.com/security/cve/CVE-2025-64101 · Note
• https://suse.com/security/cve/CVE-2016-11075 · Note
• https://reddit.com/r/VulnMatter/comments/1oezejc/resumen_diario_de_vulnerabilidades_24102025 · Reddit Post