Description
HashiCorp Vault and Vault Enterprise’s approle auth method allowed any authenticated user with access to an approle destroy endpoint to destroy the secret ID of any other role by providing the secret ID accessor. This vulnerability is fixed in Vault 1.13.0, 1.12.4, 1.11.8, 1.10.11 and above.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HashiCorp | Vault | 1.12.0 – < 1.12.4, 1.11.0 – < 1.11.8, < 1.10.11 | 1.12.4 |
| HashiCorp | Vault Enterprise | 1.12.0 – < 1.12.4, 1.11.0 – < 1.11.8, < 1.10.11 | 1.12.4 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | k3d +2 | 5.6.0-r11 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/hashicorp/vault | < 1.10.11 | 1.10.11 | GHSA-wmg5-g953-qqfw |
| Go | github.com/hashicorp/vault | >= 1.11.0, < 1.11.8 | 1.11.8 | GHSA-wmg5-g953-qqfw |
| Go | github.com/hashicorp/vault | >= 1.12.0, < 1.12.4 | 1.12.4 | GHSA-wmg5-g953-qqfw |
| Go | github.com/hashicorp/vault | < 1.10.11 · >= 1.11.0, < 1.11.8 · >= 1.12.0, < 1.12.4 | 1.10.11, 1.11.8, 1.12.4 | GO-2023-1900 |
Advisories 2
- WID-SEC-2023-1542 Red Hat OpenShift: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 18, 2025
- WID-SEC-2023-0627 Hashicorp Vault: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Mar 12, 2023