CVE-2025-24365 vaultwarden allows escalation of privilege via variable confusion in OrgHeaders trait
An attacker with admin rights in one organization can escalate privileges to gain owner rights in another organization, potentially accessing sensitive data.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-24365?
CVE-2025-24365 is a high-severity vulnerability in dani-garcia vaultwarden, published on 27 Jan 2025. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs. Attacker can obtain owner rights of other organization. Hacker should know the ID of victim organization (in real case the user can be a part of the organization as an unprivileged user) and be the owner/admin of other organization (by default you can create your own organization) in order to attack. This vulnerability is fixed in 1.33.0.
Weakness: CWE-284
Which versions are affected by CVE-2025-24365?
It affects 1 product.
Products include Dani-Garcia Vaultwarden.
How do I fix CVE-2025-24365?
No fix has been published for CVE-2025-24365 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-24365 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-24365 exists.
Other vulnerabilities in dani-garcia vaultwarden
- CVE-2024-55225 Vaultwarden vulnerable to user impersonation
- CVE-2024-55224 Vaultwarden HTML injection vulnerability
- CVE-2024-39924 Privilege escalation in n/a
- CVE-2026-43912 Vaultwarden: Cross-Org Group Binding Enables Unauthorized Read And Write Access Into Another Organization
- CVE-2026-27802 Vaultwarden: Privilege Escalation via Bulk Permission Update to Unauthorized Collections by Manager
Sources
Also known as GHSA-j4h8-vch3-f797.