GO-2025-3836

vendorUSosv

Hashicorp Vault has Incorrect Validation for Non-CA Certificates in github.com/hashicorp/vault

view advisory published 2025-08-11Licence: per source

Hashicorp Vault has Incorrect Validation for Non-CA Certificates in github.com/hashicorp/vault

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2025-6037US——
Vault and Vault Enterprise (“Vault”) TLS certificate auth method did not correctly validate client certificates when configured with a non-CA certificate as [+trusted certificate+|…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan