TOTP Code Reuse in OpenBao Software Solution

CVE-2025-55000

What is CVE-2025-55000?

The TOTP secrets engine within OpenBao allows for the reuse of valid codes due to unexpected normalization issues in its underlying TOTP library. In affected versions from 0.1.0 to 2.3.1, this flaw enables the same TOTP codes to be accepted multiple times instead of just once as intended. Organizations using OpenBao should ensure that TOTP codes are properly normalized prior to submission to the endpoint and should restrict code verification to trusted systems to mitigate the risk of unauthorized access to sensitive data.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References