PT-2026-5015 · Delinea · Secret Server On-Prem+1

Published 2026-01-27 · Updated 2026-02-06 · CVE-2025-12810

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions Delinea Inc. Secret Server On-Prem versions 11.8.1, 11.9.6, and 11.9.25

Description An improper authentication issue exists in the RPC Password Rotation modules of Delinea Inc. Secret Server On-Prem. When a secret has the "change password on check in" feature enabled, it can automatically check in even if the password change fails after multiple attempts. This results in the secret remaining in an inconsistent state with an incorrect password.

Recommendations Upgrade to Secret Server On-Prem version 11.9.47 or later. The secret will remain checked out when the password change fails.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2025-12810

Affected Products

Secret Server On-Prem

Secret Server

References · 6

• 🔥 https://trust.delinea.com · Exploit
• https://trust.delinea.com/?tcuUid=48260de9-954d-45c2-9c66-2c9510798a0b · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-12810 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-12810 · Security Note
• https://t.me/cveNotify/151170 · Telegram Post
• https://docs.delinea.com/online-help/secret-server/release-notes/ss-rn-11-9-000047.htm · Note