CVE-2024-39925

Vaultwarden (1.30.3) suffers an offboarding/key rotation flaw: when members leave, the shared organization key is not rotated, allowing departing users to retain key material and potentially decrypt data. In addition, an authenticated user could access encrypted data across organizations if they ...