CVE-2025-54997

🗓️ 09 Aug 2025 01:56:45Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 125 Views🌐 WEB

OpenBao CVE-2025-54997: v2.3.1 and earlier allow audit log prefix abuse to bypass controls, enabling code and network access; fixed in 2.3.2. Workaround deny sys/audit/*; root operators cannot be restricted.

Reporter	Title	Published	Views	Family All 29
AlpineLinux	CVE-2025-54997	9 Aug 202501:56	–	alpinelinux
BDU FSTEC	OpenBao Secret Encryption Management System Code Execution	17 Sep 202500:00	–	bdu_fstec
Circl	CVE-2025-54997	9 Aug 202504:21	–	circl
CNNVD	OpenBao code injection vulnerability	9 Aug 202500:00	–	cnnvd
CNVD	OpenBao Code Injection Vulnerability	15 Aug 202500:00	–	cnvd
Cvelist	CVE-2025-54997 OpenBao: Privileged Operator May Execute Code on the Underlying Host	9 Aug 202501:56	–	cvelist
EUVD	EUVD-2025-24037	3 Oct 202520:07	–	euvd
Github Security Blog	Privileged OpenBao Operator May Execute Code on the Underlying Host	8 Aug 202514:37	–	github
Mend	CVE-2025-54997	9 Aug 202501:56	–	mend
NVD	CVE-2025-54997	9 Aug 202503:15	–	nvd

NVD

Vulners

Node

openbao openbaoRange<2.3.2

[
  {
    "vendor": "openbao",
    "product": "openbao",
    "versions": [
      {
        "version": "< 2.3.2",
        "status": "affected"
      }
    ]
  }
]

Source	Link
discuss	www.discuss.hashicorp.com/t/hcsec-2025-14-privileged-vault-operator-may-execute-code-on-the-underlying-host/76033
github	www.github.com/openbao/openbao/pull/1634
github	www.github.com/openbao/openbao/releases/tag/v2.3.2
github	www.github.com/openbao/openbao/security/advisories/GHSA-xp75-r577-cvhp

Parameter	Position	Path	Description	CWE
*	path	/sys/audit/*	Privileged API operators can bypass restrictions on executing system code or making network connections by manipulating log prefixes via the audit subsystem.	CWE-94