https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T02:40:21.625992+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-05665 bdu:2026-05665 2026-10-03T02:40:21.710444+00:00 bdu:2026-05665 https://cve.radiocsirt.org/vuln/bit-vault-2026-4525 BIT-vault-2026-4525 — Vault Token Leaked to Backends via Authorization: Bearer Passthrough Header 2026-10-03T02:40:21.710483+00:00

Affected: Bitnami: vault

If a Vault auth mount is configured to pass through the "Authorization" header, and the "Authorization" header is used to authenticate to Vault, Vault forwarded the Vault token to the auth plugin backend. Fixed in 2.0.0, 1.21.5, 1.20.10, and 1.19.16.

 https://cve.radiocsirt.org/vuln/euvd-2026-337229 EUVD-2026-337229 2026-10-03T02:40:21.710535+00:00 EUVD-2026-337229 https://cve.radiocsirt.org/vuln/fkie_cve-2026-4525 fkie_cve-2026-4525 2026-10-03T02:40:21.710566+00:00

If a Vault auth mount is configured to pass through the "Authorization" header, and the "Authorization" header is used to authenticate to Vault, Vault forwarded the Vault token to the auth plugin backend. Fixed in 2.0.0, 1.21.5, 1.20.10, and 1.19.16.

 https://cve.radiocsirt.org/vuln/ghsa-72gw-fmmr-c4r4 GHSA-72gw-fmmr-c4r4 — HashiCorp Vault May Expose Tokens to Auth Plugins Due to Incorrect Header Sanitization 2026-10-03T02:40:21.710604+00:00

Affected: Go: github.com/hashicorp/vault

If a Vault auth mount is configured to pass through the "Authorization" header, and the "Authorization" header is used to authenticate to Vault, Vault forwarded the Vault token to the auth plugin backend. Fixed in 2.0.0, 1.21.5, 1.20.10, and 1.19.16.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1164 WID-SEC-W-2026-1164 — Hashicorp Vault Community Edition und Enterprise: Mehrere Schwachstellen 2026-10-03T02:40:21.710640+00:00

Ein Angreifer kann mehrere Schwachstellen in Hashicorp Vault ausnutzen, um Daten zu manipulieren, einen Denial-of-Service-Zustand zu verursachen oder vertrauliche Informationen offenzulegen, was möglicherweise eine Privilegienerweiterung ermöglicht.