CVE-2025-4656 Vault Vulnerable to Recovery Key Cancellation Denial of Service

Vault Community and Vault Enterprise rekey and recovery key operations can lead to a denial of service due to uncontrolled cancellation by a Vault operator. This vulnerability CVE-2025-4656 has been remediated in Vault Community Edition 1.20.0 and Vault Enterprise 1.20.0, 1.19.6, 1.18.11, 1.17.17...

CVE-2025-4656

CVE-2025-4656 affects Vault Community Edition and Vault Enterprise: rekey and recovery key operations can cause a denial of service due to uncontrolled cancellation by a Vault operator. The issue is mitigated in Vault Community Edition 1.20.0 and Vault Enterprise updates 1.20.0, 1.19.6, 1.18.11, ...

PT-2025-26854

Name of the Vulnerable Software and Affected Versions: Vault Community and Vault Enterprise versions prior to 1.20.0 Vault Enterprise versions prior to 1.19.6, 1.18.11, 1.17.17, and 1.16.22 Description: The issue is related to uncontrolled cancellation by a Vault operator during rekey and recover...