CVE-2025-6037

Description

Hashicorp Vault has Incorrect Validation for Non-CA Certificates in github.com/hashicorp/vault

Affected packages (3)

• Bitnami/vaultfrom 0, < 1.20.1
• Go/github.com/hashicorp/vaultfrom 0, < 1.20.1
• Go/github.com/hashicorp/vaultfrom 0, < 1.20.1

CVSS scores

References (4)

• ADVISORYhttps://github.com/advisories/GHSA-6c5r-4wfc-3mcx
• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2025-6037
• PATCHhttps://github.com/hashicorp/vault
• WEBhttps://discuss.hashicorp.com/t/hcsec-2025-18-vault-certificate-auth-method-did-not-validate-common-name-for-non-ca-certificates/76037