Skip to content
OpenAdvisories
High WID-SEC-2025-1855 7 CVEs

OpenBao: Mehrere Schwachstellen

Published Aug 17, 2025 · Updated Aug 19, 2025 · Revision 2 · de-DE

Vendor: SUSE Product: openSUSE

Summary

Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in OpenBao ausnutzen, um beliebigen Code auszuführen, Root-Rechte zu erlangen, Sicherheitsmaßnahmen zu umgehen und vertrauliche Informationen offenzulegen.

Product

OpenBao ist eine Open-Source-Lösung für Secrets Management, die sensible Daten wie Passwörter, API-Schlüssel und Zertifikate sicher speichert und verwaltet.

Vulnerabilities 7

  • Critical 9.1
    CVE-2025-54997

    OpenBao: Privileged Operator May Execute Code on the Underlying Host

    OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. In versions 2.3.1 and below, some OpenBao deployments intentionally limit privileged API operators from executing system c…

    openbao openbao github.com/openbao/openbao openbao Alpine Go
  • High 7.2
    CVE-2025-54996

    OpenBao Root Namespace Operator May Elevate Token Privileges

    OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. In versions 2.3.1 and below, accounts with access to highly-privileged identity entity systems in root namespaces were abl…

    openbao openbao github.com/openbao/openbao openbao Alpine Go
  • Medium 6.5
    CVE-2025-55000

    OpenBao TOTP Secrets Engine Enables Code Reuse

    OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. In versions 0.1.0 through 2.3.1, OpenBao's TOTP secrets engine could accept valid codes multiple times rather than strictl…

    openbao openbao github.com/openbao/openbao openbao Alpine Go
  • Medium 6.5
    CVE-2025-55001

    OpenBao LDAP MFA Enforcement Bypass When Using Username As Alias

    OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. In versions 2.3.1 and below, OpenBao allowed the assignment of policies and MFA attribution based upon entity aliases, cho…

    openbao openbao github.com/openbao/openbao Go
  • Medium 5.7
    CVE-2025-55003

    OpenBao Login MFA Bypasses Rate Limiting and TOTP Token Reuse

    OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. In versions 2.3.1 and below, OpenBao's Login Multi-Factor Authentication (MFA) system allows enforcing MFA using Time-base…

    openbao openbao github.com/openbao/openbao openbao Alpine Go
  • Medium 5.3
    CVE-2025-54998

    OpenBao Userpass and LDAP User Lockout Bypass

    OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. In versions 0.1.0 through 2.3.1, attackers could bypass the automatic user lockout mechanisms in the OpenBao Userpass or L…

    openbao openbao github.com/openbao/openbao openbao Alpine Go
  • Low 3.7
    CVE-2025-54999

    OpenBao: Timing Side-Channel in Userpass Auth Method

    OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. In versions 0.1.0 through 2.3.1, when using OpenBao's userpass auth method, user enumeration was possible due to timing di…

    openbao openbao github.com/openbao/openbao openbao Alpine Go

Revision history

  1. #2

    Neue Updates von openSUSE aufgenommen

  2. #1

    Initiale Fassung

References