Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 22:11:33 +0000 bdu:2026-05665 https://cve.radiocsirt.org/vuln/bdu:2026-05665 bdu:2026-05665 https://cve.radiocsirt.org/vuln/bdu:2026-05665 BIT-vault-2026-4525 — Vault Token Leaked to Backends via Authorization: Bearer Passthrough Header https://cve.radiocsirt.org/vuln/bit-vault-2026-4525 <p><strong>Affected:</strong> Bitnami: vault</p> <p>If a Vault auth mount is configured to pass through the &#34;Authorization&#34; header, and the &#34;Authorization&#34; header is used to authenticate to Vault, Vault forwarded the Vault token to the auth plugin backend. Fixed in 2.0.0, 1.21.5, 1.20.10, and 1.19.16.</p> <p><strong>Affected:</strong> Bitnami: vault</p> <p>If a Vault auth mount is configured to pass through the &#34;Authorization&#34; header, and the &#34;Authorization&#34; header is used to authenticate to Vault, Vault forwarded the Vault token to the auth plugin backend. Fixed in 2.0.0, 1.21.5, 1.20.10, and 1.19.16.</p> https://cve.radiocsirt.org/vuln/bit-vault-2026-4525 EUVD-2026-337229 https://cve.radiocsirt.org/vuln/euvd-2026-337229 EUVD-2026-337229 https://cve.radiocsirt.org/vuln/euvd-2026-337229 fkie_cve-2026-4525 https://cve.radiocsirt.org/vuln/fkie_cve-2026-4525 <p>If a Vault auth mount is configured to pass through the &#34;Authorization&#34; header, and the &#34;Authorization&#34; header is used to authenticate to Vault, Vault forwarded the Vault token to the auth plugin backend. Fixed in 2.0.0, 1.21.5, 1.20.10, and 1.19.16.</p> <p>If a Vault auth mount is configured to pass through the &#34;Authorization&#34; header, and the &#34;Authorization&#34; header is used to authenticate to Vault, Vault forwarded the Vault token to the auth plugin backend. Fixed in 2.0.0, 1.21.5, 1.20.10, and 1.19.16.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-4525 GHSA-72gw-fmmr-c4r4 — HashiCorp Vault May Expose Tokens to Auth Plugins Due to Incorrect Header Sanitization https://cve.radiocsirt.org/vuln/ghsa-72gw-fmmr-c4r4 <p><strong>Affected:</strong> Go: github.com/hashicorp/vault</p> <p>If a Vault auth mount is configured to pass through the &#34;Authorization&#34; header, and the &#34;Authorization&#34; header is used to authenticate to Vault, Vault forwarded the Vault token to the auth plugin backend. Fixed in 2.0.0, 1.21.5, 1.20.10, and 1.19.16.</p> <p><strong>Affected:</strong> Go: github.com/hashicorp/vault</p> <p>If a Vault auth mount is configured to pass through the &#34;Authorization&#34; header, and the &#34;Authorization&#34; header is used to authenticate to Vault, Vault forwarded the Vault token to the auth plugin backend. Fixed in 2.0.0, 1.21.5, 1.20.10, and 1.19.16.</p> https://cve.radiocsirt.org/vuln/ghsa-72gw-fmmr-c4r4 WID-SEC-W-2026-1164 — Hashicorp Vault Community Edition und Enterprise: Mehrere Schwachstellen https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1164 <p>Ein Angreifer kann mehrere Schwachstellen in Hashicorp Vault ausnutzen, um Daten zu manipulieren, einen Denial-of-Service-Zustand zu verursachen oder vertrauliche Informationen offenzulegen, was möglicherweise eine Privilegienerweiterung ermöglicht.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Hashicorp Vault ausnutzen, um Daten zu manipulieren, einen Denial-of-Service-Zustand zu verursachen oder vertrauliche Informationen offenzulegen, was möglicherweise eine Privilegienerweiterung ermöglicht.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1164