Hashicorp Vault vulnerabilities
72 published vulnerabilities in Hashicorp Vault. The most were published in 2025 (14), and 4 so far in 2026.
Hashicorp Vault vulnerabilities by year
2018
2020
2021
2022
2023
2024
2025
2026
Most exploited Hashicorp Vault vulnerabilities
- CVE-2020-35192 Hardcoded credentials in n/a
- CVE-2020-12757 Improper Input Validation in HashiCorp Vault
- CVE-2025-6000 Arbitrary Remote Code Execution via Plugin Catalog Abuse
- CVE-2022-40186 HashiCorp Vault vulnerable to incorrect metadata access
- CVE-2022-36129 Missing authorization in n/a
- CVE-2020-10661 HashiCorp Vault Improper Privilege Management
- CVE-2020-16250 Authentication Bypass by Spoofing and Insufficient Verification of Data Authenticity in Hashicorp Vault
- CVE-2020-16251 HashiCorp Vault Authentication bypass
- CVE-2026-3605 Vault KVv2 Metadata and Secret Deletion Policy Bypass Denial-of-Service
- CVE-2025-11621 Vault AWS auth method bypass due to AWS client cache
- CVE-2024-2048 Vault Cert Auth Method Did Not Correctly Validate Non-CA Certificates
- CVE-2021-42135 Incorrect Privilege Assignment in HashiCorp Vault
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.