CVE-2025-6014

Description

Hashicorp Vault's TOTP Secrets Engine Susceptible to Code Reuse in github.com/hashicorp/vault

Affected packages (3)

• Bitnami/vaultfrom 0, < 1.20.1
• Go/github.com/hashicorp/vaultfrom 0, < 1.20.1
• Go/github.com/hashicorp/vaultfrom 0, < 1.20.1

CVSS scores

References (4)

• ADVISORYhttps://github.com/advisories/GHSA-qv3p-fmv3-9hww
• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2025-6014
• PATCHhttps://github.com/hashicorp/vault
• WEBhttps://discuss.hashicorp.com/t/hcsec-2025-17-vault-totp-secrets-engine-code-reuse/76036