Information leakage vulnerability in OpenBao by OpenBao
CVE-2025-52893

4.5MEDIUM

Key Information:

Vendor

Openbao

Status
Openbao
Vendor
CVE Published:
25 June 2025

What is CVE-2025-52893?

OpenBao, a platform designed for secure management and distribution of sensitive data, has a vulnerability that allows the exposure of sensitive information in its logs when handling malformed data inputs. This issue affects versions prior to v2.3.0 and can compromise data integrity and confidentiality. Users are urged to upgrade to version 2.3.0 or later to mitigate this risk and ensure that all client requests are properly formatted, as there currently exists no reliable workaround for this vulnerability.

Affected Version(s)

openbao < 2.3.0

References

https://github.com/openbao/openbao/security/advisories/GH...
x_refsource_CONFIRM
https://github.com/go-viper/mapstructure/pull/105
x_refsource_MISC
https://github.com/go-viper/mapstructure/commit/ed3f92181...
x_refsource_MISC

CVSS V3.1

Score:
4.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-52893 : Information leakage vulnerability in OpenBao by OpenBao