GHSA-VP5W-XCFC-73WF Hashicorp Vault and Vault Enterprise vulnerable to a denial of service when processing JSON

🗓️ 23 Oct 2025 21:31:44Reported by GoogleType

osv🔗 osv.dev👁 4 Views

Vault and Vault Enterprise are vulnerable to unauthenticated denial of service from JSON payloads before rate limiting; fixed in specified releases.

Reporter	Title	Published	Views	Family All 37
IBM Security Bulletins	Security Bulletin: Vault Vulnerable to Denial of Service Due to Rate Limit Regression	21 May 202619:43	–	ibm
BDU FSTEC	The vulnerability of the Vault access control system and the Vault Enterprise platform for archiving corporate information, related to unlimited resource distribution, allows a perpetrator to cause service interruptions.	27 Oct 202500:00	–	bdu_fstec
Chainguard	CVE-2025-12044 vulnerabilities	7 Jan 202601:30	–	cgr
Circl	CVE-2025-12044	25 Oct 202508:15	–	circl
CNNVD	HashiCorp Vault Enterprise 安全漏洞	23 Oct 202500:00	–	cnnvd
CVE	CVE-2025-12044	23 Oct 202519:15	–	cve
Cvelist	CVE-2025-12044 Vault Vulnerable to Denial of Service Due to Rate Limit Regression	23 Oct 202519:15	–	cvelist
EUVD	EUVD-2025-35718	23 Oct 202521:31	–	euvd
Github Security Blog	Hashicorp Vault and Vault Enterprise vulnerable to a denial of service when processing JSON	23 Oct 202521:31	–	github
HashiCorp Security Advisories	Vault Vulnerable to Denial of Service Due to Rate Limit Regression	23 Oct 202519:14	–	hashicorp

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-12044
github	www.github.com/hashicorp/vault/commit/b19e74c29a33ed2a99fc01626104db1a49345df3
github	www.github.com/hashicorp/vault/commit/eedc2b7426f30e57e306229ce697ce81e203ab89
discuss	www.discuss.hashicorp.com/t/hcsec-2025-31-vault-vulnerable-to-denial-of-service-due-to-rate-limit-regression/76710
github	www.github.com/hashicorp/vault

04 Feb 2026 02:38Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.17.5

EPSS0.00517