PT-2026-33398

CVE-2026-4525

Published

2026-04-16

Updated

2026-07-30

Description by

CVSS 3.1

8.8

High

MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions HashiCorp Vault versions prior to 2.0.0 HashiCorp Vault versions prior to 1.21.5 HashiCorp Vault versions prior to 1.20.10 HashiCorp Vault versions prior to 1.19.16

Description When a Vault auth mount is configured to pass through the 'Authorization' header and that same header is used for authentication to Vault, the system forwards the Vault token to the auth plugin backend, leading to token disclosure.

Recommendations Update to version 2.0.0 Update to version 1.21.5 Update to version 1.20.10 Update to version 1.19.16

Exploitability

Exploit

Fix

Impacts

Researchers

Oleh Konko

Vendors

Affected products

Weakness enumeration

CWE-201: Insertion of Sensitive Information Into Sent Data

Related identifiers