Skip to content
OpenAdvisories

Vendor

HashiCorp

139 known vulnerabilities.

Products

Vault Enterprise 49 Vault 43 Consul 27 Consul Enterprise 27 Nomad Enterprise 26 Nomad 24 Tooling 13 Shared library 10 Boundary 5 Boundary Enterprise 4 Terraform Enterprise 3 Vagrant 2 go-slug 1 Packer 1 Terraform 1 go-getter 1 Vagrant < 2.4.0 0 Vault < 1.11.3 0 Vault < 1.10.6 0 Vault < 1.9.9 0 Vault < 1.13.2 0 Vault < 1.13.1 0 Vault < 1.12.5 0 Vault < 1.11.9 0 Terraform Enterprise < v202306-1 0 Vault < 1.15.5 0 Terraform < 1.5.7 0 Vault < 1.13.0 0 Vault < 1.12.4 0 Vault < 1.11.8 0 Vault < 1.10.11 0 Vault < 1.14.0 0 Vault < 1.11.11 0 Vault < 1.12.7 0 Vault < 1.13.3 0 Vault < 1.14.3 0 Vault < 1.13.7 0 Vault < 1.7.6 0 Vault < 1.12.11 0 Vault < 1.8.5 0
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Low 3.7
    CVE-2025-6011

    Timing Side-Channel in Vault’s Userpass Auth Method

    A timing side channel in Vault and Vault Enterprise’s (“Vault”) userpass auth method allowed an attacker to distinguish between existing and non-existing users, and potentially enumerate valid usernames for Vault’s Userpass auth method. Fixed in Vault Communi…

    HashiCorp Vault Enterprise Vault splunk-otel-collector Wolfi Go
  • Low 3.1
    CVE-2025-4656

    Vault Vulnerable to Recovery Key Cancellation Denial of Service

    Vault Community and Vault Enterprise rekey and recovery key operations can lead to a denial of service due to uncontrolled cancellation by a Vault operator. This vulnerability (CVE-2025-4656) has been remediated in Vault Community Edition 1.20.0 and Vault Ent…

    HashiCorp Vault Enterprise Vault splunk-otel-collector Wolfi Go
  • Low 3.8
    CVE-2024-10228

    Vagrant VMWare Utility installation files vulnerable to modification by unprivileged user

    The Vagrant VMWare Utility Windows installer targeted a custom location with a non-protected path that could be modified by an unprivileged user, introducing potential for unauthorized file system writes. This vulnerability, CVE-2024-10228, was fixed in Vagra…

    HashiCorp Vagrant
  • Low 2.6
    CVE-2024-5798

    Vault Incorrectly Validated JSON Web Tokens (JWT) Audience Claims

    Vault and Vault Enterprise did not properly validate the JSON Web Token (JWT) role-bound audience claim when using the Vault JWT auth method. This may have resulted in Vault validating a JWT the audience and role-bound claims do not match, allowing an invalid…

    HashiCorp Vault Enterprise Vault github.com/hashicorp/vault Go
  • Low 3.8
    CVE-2023-5834

    Vagrant’s Windows Installer Allowed Directory Junction Write

    HashiCorp Vagrant's Windows installer targeted a custom location with a non-protected path that could be junctioned, introducing potential for unauthorized file system writes. Fixed in Vagrant 2.4.0.

    HashiCorp Vagrant github.com/hashicorp/vagrant Go
  • Low 3.4
    CVE-2023-3299

    Nomad Caller ACL Token's Secret ID is Exposed to Sentinel

    HashiCorp Nomad Enterprise 1.2.11 up to 1.5.6, and 1.4.10 ACL policies using a block without a label generates unexpected results. Fixed in 1.6.0, 1.5.7, and 1.4.11.

    HashiCorp Nomad Enterprise nomad github.com/hashicorp/nomad Ubuntu Go
  • Low 2.5
    CVE-2023-2197

    Vault Enterprise Vulnerable to Padding Oracle Attacks When Using a CBC-based Encryption Mechanism with a HSM

    HashiCorp Vault Enterprise 1.13.0 up to 1.13.1 is vulnerable to a padding oracle attack when using an HSM in conjunction with the CKM_AES_CBC_PAD or CKM_AES_CBC encryption mechanisms. An attacker with privileges to modify storage and restart Vault may be able…

    HashiCorp Vault Enterprise vault Alpine
  • Low 2.7
    CVE-2023-1296

    Nomad ACLs Can Not Deny Access to Workload's Own Variables

    HashiCorp Nomad and Nomad Enterprise 1.4.0 up to 1.5.0 did not correctly enforce deny policies applied to a workload’s variables. Fixed in 1.4.6 and 1.5.1.

    HashiCorp Nomad Enterprise Nomad nomad Ubuntu Alpine Go
  • Low 2.7
    CVE-2022-3867

    Nomad Event Stream Subscriber Using a Token with TTL Receives Updates Until Garbage Collected

    HashiCorp Nomad and Nomad Enterprise 1.4.0 up to 1.4.1 event stream subscribers using a token with TTL receive updates until token garbage is collected. Fixed in 1.4.2.

    HashiCorp Nomad Enterprise Nomad nomad Ubuntu Go