https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 19:58:01 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-09565 bdu:2025-09565 https://cve.radiocsirt.org/vuln/bdu:2025-09565 https://cve.radiocsirt.org/vuln/bit-vault-2025-5999 <p><strong>Affected:</strong> Bitnami: vault</p> <p>A privileged Vault operator with write permissions to the root namespace’s identity endpoint could escalate their own or another user’s token privileges to Vault’s root policy. Fixed in Vault Community Edition 1.20.0 and Vault Enterprise 1.20.0, 1.19.6, 1.18.11 and 1.16.22.</p> <p><strong>Affected:</strong> Bitnami: vault</p> <p>A privileged Vault operator with write permissions to the root namespace’s identity endpoint could escalate their own or another user’s token privileges to Vault’s root policy. Fixed in Vault Community Edition 1.20.0 and Vault Enterprise 1.20.0, 1.19.6, 1.18.11 and 1.16.22.</p> https://cve.radiocsirt.org/vuln/bit-vault-2025-5999 https://cve.radiocsirt.org/vuln/euvd-2026-248897 EUVD-2026-248897 https://cve.radiocsirt.org/vuln/euvd-2026-248897 https://cve.radiocsirt.org/vuln/fkie_cve-2025-5999 <p>A privileged Vault operator with write permissions to the root namespace’s identity endpoint could escalate their own or another user’s token privileges to Vault’s root policy. Fixed in Vault Community Edition 1.20.0 and Vault Enterprise 1.20.0, 1.19.6, 1.18.11 and 1.16.22.</p> <p>A privileged Vault operator with write permissions to the root namespace’s identity endpoint could escalate their own or another user’s token privileges to Vault’s root policy. Fixed in Vault Community Edition 1.20.0 and Vault Enterprise 1.20.0, 1.19.6, 1.18.11 and 1.16.22.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-5999 https://cve.radiocsirt.org/vuln/ghsa-6h4p-m86h-hhgh <p><strong>Affected:</strong> Go: github.com/hashicorp/vault</p> <p>A privileged Vault operator with write permissions to the root namespace’s identity endpoint could escalate their own or another user’s token privileges to Vault’s root policy. Fixed in Vault Community Edition 1.20.0 and Vault Enterprise 1.20.0, 1.19.6, 1.18.11 and 1.16.22.</p> <p><strong>Affected:</strong> Go: github.com/hashicorp/vault</p> <p>A privileged Vault operator with write permissions to the root namespace’s identity endpoint could escalate their own or another user’s token privileges to Vault’s root policy. Fixed in Vault Community Edition 1.20.0 and Vault Enterprise 1.20.0, 1.19.6, 1.18.11 and 1.16.22.</p> https://cve.radiocsirt.org/vuln/ghsa-6h4p-m86h-hhgh https://cve.radiocsirt.org/vuln/opensuse-su-2025:15434-1 <p>govulncheck-vulndb-0.0.20250811T192933-1.1 on GA media</p> <p>govulncheck-vulndb-0.0.20250811T192933-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:15434-1 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1702 <p>Ein Angreifer kann mehrere Schwachstellen in Hashicorp Vault ausnutzen, um erhöhte Rechte zu erlangen, Sicherheitsmaßnahmen zu umgehen, beliebigen Code auszuführen und vertrauliche Informationen preiszugeben.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Hashicorp Vault ausnutzen, um erhöhte Rechte zu erlangen, Sicherheitsmaßnahmen zu umgehen, beliebigen Code auszuführen und vertrauliche Informationen preiszugeben.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1702