Skip to content
OpenAdvisories

Vendor

dani-garcia

20 known vulnerabilities.

Products

vaultwarden 20
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-26012 Public exploit

    vaultwarden has Full Cipher Enumeration Ignoring Organization Collection Permissions

    vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs. Prior to 1.35.3, a regular organization member can retrieve all ciphers within an organization, regardless of collection permissions. The endpoint /ciphe…

    dani-garcia vaultwarden