CVE-2025-54998

creationtimestamp| type| source ---|---|--- 2025-08-09 02:54:51+00:00| seen| Telegram/VRQ8nOD2Yg7eE06HRaX53f7iCLQVvhDbkZHrthJoVgHB1ng...

CVE-2025-54998

CVE-2025-54998 affects OpenBao versions 0.1.0–2.3.1, where an aliasing mismatch between pre-flight and full login user entity attributes allowed bypass of automatic user lockout in Userpass/LDAP auth. The issue is fixed in version 2.3.2. Remediation: upgrade to 2.3.2; as a workaround, apply rate-...