336 matches found
vaultwarden-ip-header-spoof
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · vaultwarden-ip-header-spoof vaultwarden-ip-header-spoof Vaultwarden 1.37.3 - dani-garcia Default IPHEADER=X-Real-IP plus IPHEADERTRUSTEDPROXIES=local treats any non-global TCP peer as a reverse proxy. Stock Docker...
CVE-2026-26012
CVE-2026-26012 — Vaultwarden Cipher Enumeration PoC Full Cipher Enumeration Ignoring Organization Collection Permissions A proof-of-concept exploit for CVE-2026-26012, a broken access control vulnerability in Vaultwarden = 1.35.2 that allows any organization member to retrieve and decrypt all...
CVE-2026-43914-PoC
CVE-2026-43914 — Vaultwarden Email-2FA Brute-Force Protection Bypass Proof-of-concept for CVE-2026-43914 : when Email 2FA is enabled, Vaultwarden's login brute-force protection can be completely bypassed via the unauthenticated POST /api/two-factor/send-email-login endpoint, which acts as an...
FreeBSD : Vaultwarden -- Multiple vulnerabilities (3a72cd47-c157-11f1-a6ea-8447094a420f)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 3a72cd47-c157-11f1-a6ea-8447094a420f advisory. The Vaultwarden project reports: Tenable has extracted the preceding description block directly from th...
Vaultwarden -- Multiple vulnerabilities
The Vaultwarden project reports: Organization member revocation GHSA-69q9-v8p6-xvx3 High, 8.1 Two-factor authentication GHSA-7jg8-8m5x-6j9r Medium, 6.8 Organization invitations GHSA-v576-3wvq-xh3c Medium, 6.8 Attachments GHSA-q5x6-grh5-fqgc Medium, 6.5 Organization event logs GHSA-64mc-4p6f-r7x9...
CVE-2026-26012
CVE-2026-26012 - Prueba de Concepto Omisión de Permisos de Colección para Miembros Autenticados y Enumeración de Cifrados Vaultwarden Referencia NVD: CVE-2026-26012 CVSSv3| Vector de Ataque| Complejidad de Ataque| Privilegios Requeridos| Interacción del Usuario| Confidencialidad| Integridad|...
CVE-2026-95814
A flaw was found in Vaultwarden. This vulnerability allows revoked and not-yet-confirmed organization members to bypass authorization checks. By exploiting missing status filters in specific access-restriction queries, these unauthorized members can retain read, write, delete, and attachment acce...
CVE-2026-95814
Vaultwarden through 1.37.3 omits organization membership status validation from three cipher access-restriction queries, allowing revoked and not-yet-confirmed members to retain read, write, delete, and attachment access to organization ciphers. Attackers with revoked or pending membership can...
EUVD-2026-84861
Vaultwarden through 1.37.3 omits organization membership status validation from three cipher access-restriction queries, allowing revoked and not-yet-confirmed members to retain read, write, delete, and attachment access to organization ciphers. Attackers with revoked or pending membership can...
CVE-2026-95814
Versions of Vaultwarden through 1.37.3 are vulnerable to an authorization bypass due to a missing status check in organization membership validation. Specifically, the application fails to filter membership status in three queries: get_user_collections_access_flags, get_group_collections_access_f...
CVE-2026-95814 Vaultwarden through 1.37.3 Authorization Bypass via Missing Status Check
Vaultwarden through 1.37.3 omits organization membership status validation from three cipher access-restriction queries, allowing revoked and not-yet-confirmed members to retain read, write, delete, and attachment access to organization ciphers. Attackers with revoked or pending membership can...
CVE-2026-95814 Vaultwarden through 1.37.3 Authorization Bypass via Missing Status Check
Vaultwarden through 1.37.3 omits organization membership status validation from three cipher access-restriction queries, allowing revoked and not-yet-confirmed members to retain read, write, delete, and attachment access to organization ciphers. Attackers with revoked or pending membership can...
CVE-2026-95814 Vaultwarden through 1.37.3 Authorization Bypass via Missing Status Check
Vaultwarden through 1.37.3 omits organization membership status validation from three cipher access-restriction queries, allowing revoked and not-yet-confirmed members to retain read, write, delete, and attachment access to organization ciphers. Attackers with revoked or pending membership can...
CVE-2026-95814: Incorrect Authorization
Vaultwarden through 1.37.3 omits organization membership status validation from three cipher access-restriction queries, allowing revoked and not-yet-confirmed members to retain read, write, delete, and attachment access to organization ciphers. Attackers with revoked or pending membership can...
PT-2026-97055
Name of the Vulnerable Software and Affected Versions Vaultwarden versions prior to 1.37.4 Description Organization membership status validation is omitted from three cipher access-restriction queries. This allows members with revoked or not-yet-confirmed status to maintain read, write, delete, a...
Exploit for Improper Restriction of Excessive Authentication Attempts in Dani-Garcia Vaultwarden
CVE-2026-43914 — Vaultwarden Email-2FA Brute-Force Protection...
Vaultwarden /events/collect cross-organization event injection
Vaultwarden /events/collect Cross-Organization Event Injection Vulnerability Overview The Bitwarden protocol's event-reporting endpoint POST /events/collect receives user operation events submitted by clients entry viewing, password-field copying, editing, etc., and the server writes them into...
Vaultwarden unconditionally trusts the X-Real-IP header, enabling rate-limit bypass and audit IP spoofing
Vaultwarden Unconditional Trust in the X-Real-IP Request Header Leading to Rate-Limit Bypass and Audit IP Spoofing Overview Vaultwarden supports reading the client IP from a configurable HTTP request header IPHEADER, default X-Real-IP for rate limiting of login/2FA and the admin panel, as well as...
Vaultwarden icon endpoint SSRF via IP-literal hrefs
Vaultwarden icon Endpoint Server-Side Request Forgery SSRF Vulnerability Overview Vaultwarden's built-in icon service ICONSERVICE=internal automatically fetches, on the server side, the web pages and icon resources pointed to by vault entry URIs in order to display favicons for entries. The...
