VULNERABILITY INTELLIGENCE
CVE-2026-4525
CVSS score7.5 HIGH
EPSS probability0.41%
CISA KEVNot currently listed
Published2026-04-17
Last modified2026-10-25
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
If a Vault auth mount is configured to pass through the "Authorization" header, and the "Authorization" header is used to authenticate to Vault, Vault forwarded the Vault token to the auth plugin backend. Fixed in 2.0.0, 1.21.5, 1.20.10, and 1.19.16.
Weakness classification
- security@hashicorp.com: CWE-201
- 0b0ca135-0b70-47e7-9f44-1890c2a1c46c: CWE-201