CVE-2025-6013

Name of the Vulnerable Software and Affected Versions Vault versions prior to 1.20.2 Vault Enterprise versions prior to 1.20.2 Vault Enterprise version 1.19.8 Vault Enterprise version 1.18.13 Vault Enterprise version 1.16.24

Description The LDAP authentication method in Vault and Vault Enterprise may not have correctly enforced multi-factor authentication (MFA) when username as alias was set to true and a user had multiple Common Names (CNs) that were equal but contained leading or trailing spaces.

Recommendations Upgrade to Vault Community Edition version 1.20.2 or later. Upgrade to Vault Enterprise version 1.20.2 or later. Upgrade to Vault Enterprise version 1.19.8. Upgrade to Vault Enterprise version 1.18.13. Upgrade to Vault Enterprise version 1.16.24.