CVE-2025-4656

Name of the Vulnerable Software and Affected Versions: Vault Community and Vault Enterprise versions prior to 1.20.0 Vault Enterprise versions prior to 1.19.6, 1.18.11, 1.17.17, and 1.16.22

Description: The issue is related to uncontrolled cancellation by a Vault operator during rekey and recovery key operations, leading to a denial of service.

Recommendations: For Vault Community Edition, update to version 1.20.0 or later. For Vault Enterprise, update to version 1.20.0, 1.19.6, 1.18.11, 1.17.17, or 1.16.22 or later. As a temporary workaround, consider restricting access to rekey and recovery key operations to minimize the risk of exploitation.