CVE-2025-24365

vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwardenrs. Attacker can obtain owner rights of other organization. Hacker should know the ID of victim organization in real case the user can be a part of the organization as an unprivileged user and be...

CVE-2025-24365

CVE-2025-24365 affects vaultwarden (unofficial Bitwarden-compatible server in Rust, previously bitwarden_rs). The description in connected sources shows an attacker can obtain owner rights of another organization by knowing the victim organization ID and being the owner/admin of a different organ...