openbao-2.4.4-1.1 on GA media (moderate)

openbao-2.4.4-1.1 on GA media Announcement ID: openSUSE-SU-2025:15767-1 Rating: moderate Cross-References: CVE-2025-64761 CVSS scores: CVE-2025-64761 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N CVE-2025-64761 SUSE : 7.4 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N...

CVE-2025-64761

OpenBao is an open source identity-based secrets management system. Prior to version 2.4.4, a privileged operator could use the identity group subsystem to add a root policy to a group identity group, escalating their or another user's permissions in the system. Specifically this is an issue when...