Privilege Escalation

OpenBao is vulnerable to Privilege Escalation. The vulnerability is due to improper access control in the identity group subsystem, which allows a privileged operator to assign root policies to group identities and escalate permissions...

CVE-2025-64761

OpenBao is an open source identity-based secrets management system. Prior to version 2.4.4, a privileged operator could use the identity group subsystem to add a root policy to a group identity group, escalating their or another user's permissions in the system. Specifically this is an issue when...

OpenBao security vulnerabilities

OpenBao is an OpenBao open source sensitive data management software. A security vulnerability exists in OpenBao versions prior to 2.4.4, which stems from an improper assignment of privileges in the Identity Group subsystem, which could lead to elevated privileges...

CVE-2025-64761: Incorrect Privilege Assignment

OpenBao is an open source identity-based secrets management system. Prior to version 2.4.4, a privileged operator could use the identity group subsystem to add a root policy to a group identity group, escalating their or another user's permissions in the system. Specifically this is an issue when...