VULNERABILITY INTELLIGENCE

CVE-2025-67642

CVSS score4.3 MEDIUM

EPSS probability0.23%

CISA KEVNot currently listed

Published2025-12-10

Last modified2026-10-14

Description

Jenkins HashiCorp Vault Plugin 371.v884a_4dd60fb_6 and earlier does not set the appropriate context for Vault credentials lookup, allowing attackers with Item/Configure permission to access and potentially capture Vault credentials they are not entitled to.