bitwarden Latest Vulnerabilities

Latest vulnerabilities published by bitwarden

JSON RSS CSV 🔔 Create Alert Trigger

25 June 2026

JSON Injection Vulnerability in Bitwarden Server from Bitwarden
CVE-2026-57522
BitwardenServer👾🟡2.3LOW
Broken Access Control in Bitwarden Server Affecting User Billing Data
CVE-2026-57521
BitwardenServer👾🟡5.3MEDIUM
Privilege Escalation Vulnerability in Bitwarden Server by Bitwarden
CVE-2026-57520
BitwardenServer👾🟡7.1HIGH

11 May 2026

Authentication Bypass in Bitwarden Server Affects API Key Management
CVE-2026-43640
BitwardenServer👾🟡8.6HIGH
Missing Authorization Vulnerability in Bitwarden Server by Bitwarden
CVE-2026-43639
BitwardenServer👾🟡8.9HIGH
Missing Authorization in Bitwarden Server Allows Unauthorized Cipher Writing
CVE-2026-43638
BitwardenServer👾🟡5.3MEDIUM

1 May 2026

Malicious Code in Bitwarden CLI from Checkmarx Supply Chain Incident
CVE-2026-42994
BitwardenBitwarden Cli8.8HIGH

25 May 2025

Cross Site Scripting Vulnerability in Bitwarden PDF File Handler
CVE-2025-5138
BitwardenBitwarden👾🟡📰5.1MEDIUM

15 August 2023

Local Information Disclosure in Bitwarden Desktop by Bitwarden
CVE-2023-38840
BitwardenBitwarden👾🟡5.5MEDIUM

9 June 2023

Biometric Keys Stored in Windows Credential Manager Are Accessible to Unprivileged Processes
CVE-2023-27706
BitwardenBitwarden7.1HIGH

9 March 2023

21 July 2020

Server-Side Request Forgery Risk in Bitwarden Server by Bitwarden
CVE-2020-15879
BitwardenServer7.5HIGH

12 December 2019

Potentially Unwanted KDF Vulnerability in Bitwarden Server Software
CVE-2019-19766
BitwardenServer7.5HIGH