CVE-2025-6015

Description

Hashicorp Vault has Login MFA Rate Limit Bypass Vulnerability in github.com/hashicorp/vault

Affected packages (3)

• Bitnami/vault>= 1.10.0, < 1.20.1
• Go/github.com/hashicorp/vault>= 1.10.0, < 1.20.1
• Go/github.com/hashicorp/vault>= 1.10.0, < 1.20.1

CVSS scores

References (4)

• ADVISORYhttps://github.com/advisories/GHSA-v6r4-35f9-9rpw
• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2025-6015
• PATCHhttps://github.com/hashicorp/vault
• WEBhttps://discuss.hashicorp.com/t/hcsec-2025-19-vault-login-mfa-bypass-of-rate-limiting-and-totp-token-reuse/76038