Vault Token Leaked to Backends via Authorization: Bearer Passthrough Header

Vault’s Azure Authentication Method bound_location Restriction Could be Bypassed on Login

Vault Vulnerable to Server-Side Request Forgery in ACME Challenge Validation via Attacker-Controlled DNS

Vault Enterprise vulnerable to cross-namespace entity deletion

Vault KVv2 Metadata and Secret Deletion Policy Bypass Denial-of-Service

Vault AWS auth method bypass due to AWS client cache

Vault LDAP MFA Enforcement Bypass When Using Username As Alias

Vault Vulnerable to Arbitrary Code Execution via Plugin Catalog Entries Restored From Raft Snapshots

Vault Vulnerable to Denial-of-Service via Unauthenticated Root Token Generation/Rekey Operations

Vault Vulnerable to Denial of Service Due to Rate Limit Regression

Vault unauthenticated denial of service through complex json payload

Vault ACL Policy Evaluation May Allow Bypass of Deny Restrictions

Vault Root Namespace Operator May Elevate Token Privileges