GHSA-9G4H-H484-3578 HashiCorp Vault and Vault Enterprise's AWS Auth method may be susceptible to authentication bypass

🗓️ 23 Oct 2025 21:31:43Reported by GoogleType

osv🔗 osv.dev👁 3 Views

Vault AWS Auth may bypass authentication if bound_principal_iam is shared or wildcard; fixed in Vault 1.21.0 and Enterprise 1.21.0.

Reporter	Title	Published	Views	Family All 33
IBM Security Bulletins	Security Bulletin: Vault AWS Auth Method Authentication Bypass Through Mishandling of Cache Entries	21 May 202619:41	–	ibm
BDU FSTEC	The vulnerability of the bound_principal_iam component in the Access Control System Vault and the Vault Enterprise platform for archiving corporate information allows a perpetrator to circumvent existing security restrictions.	11 Dec 202500:00	–	bdu_fstec
Chainguard	CVE-2025-11621 vulnerabilities	7 Jan 202601:30	–	cgr
Circl	CVE-2025-11621	23 Oct 202521:50	–	circl
CNNVD	HashiCorp Vault Enterprise 安全漏洞	23 Oct 202500:00	–	cnnvd
CVE	CVE-2025-11621	23 Oct 202519:08	–	cve
Cvelist	CVE-2025-11621 Vault AWS auth method bypass due to AWS client cache	23 Oct 202519:08	–	cvelist
EUVD	EUVD-2025-35715	23 Oct 202521:31	–	euvd
Github Security Blog	HashiCorp Vault and Vault Enterprise's AWS Auth method may be susceptible to authentication bypass	23 Oct 202521:31	–	github
HashiCorp Security Advisories	Vault AWS Auth Method Authentication Bypass Through Mishandling of Cache Entries	23 Oct 202519:03	–	hashicorp

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-11621
github	www.github.com/hashicorp/vault/commit/8d07273d14ae7f5a48cc96f66cc86615dea83390
discuss	www.discuss.hashicorp.com/t/hcsec-2025-30-vault-aws-auth-method-authentication-bypass-through-mishandling-of-cache-entries/76709
github	www.github.com/hashicorp/vault

04 Feb 2026 02:58Current

7High risk

Vulners AI Score7

CVSS 3.18.1

EPSS0.00487