Privileged Code Execution Vulnerability in HashiCorp Vault
CVE-2025-6000

9.1CRITICAL

Key Information:

Vendor

Hashicorp
Status
Vault
Vault Enterprise
Vendor
CVE Published:
1 August 2025

What is CVE-2025-6000?

A privileged operator in HashiCorp Vault's root namespace with write access to the {{sys/audit}} endpoint risks executing arbitrary code on the underlying host. This vulnerability arises when a plugin directory is specified in Vault's configuration. An attacker with the appropriate privileges could exploit this flaw, potentially leading to significant security breaches. Users are encouraged to update to Vault Community Edition 1.20.1 or Vault Enterprise versions 1.20.1, 1.19.7, 1.18.12, or 1.16.23 to mitigate this risk.

Affected Version(s)

Vault 64 bit 0.8.0 < 1.20.1

Vault Enterprise 64 bit 0.8.0 < 1.20.1

References

https://discuss.hashicorp.com/t/hcsec-2025-14-privileged-...

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.