GitHub Advisoryadvisory · Go

GHSA-6h4p-m86h-hhgh Hashicorp Vault has Privilege Escalation Vulnerability

HIGH Published 2025-08-01 Modified 2025-08-01 Official page ↗
Aliases
CVE-2025-5999
Ecosystem
Go
Packages
github.com/hashicorp/vault
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-266
Reviewed
2025-08-01

Affected packages

• Go github.com/hashicorp/vault: >= 0.10.4, < 1.20.0 → fixed in 1.20.0

Description

A privileged Vault operator with write permissions to the root namespace’s identity endpoint could escalate their own or another user’s token privileges to Vault’s root policy. Fixed in Vault Community Edition 1.20.0 and Vault Enterprise 1.20.0, 1.19.6, 1.18.11 and 1.16.22.

Related

Alias · CVE (1)

  • CVE-2025-5999 A privileged Vault operator with write permissions to the root namespace’s identity endpoint could escalate their own or another user’s… vulnerability

Weakness · CWE (1)

  • CWE-266 Incorrect Privilege Assignment weakness

References