High · published October 24, 2025
🚨 A sneaky JSON payload could bring your Vault to its knees! 😱 Think of it like a buffet line where a few guests fill their plates with too much food, blocking everyone else from getting a bite — that's what this vulnerability does to Vault's processing capabilities! An attacker could overwhelm the system with unauthenticated requests, causing a denial of service that prevents legitimate users from accessing critical data. Imagine your entire team unable to access their vaults because of a single heavy-handed request — absolutely devastating!
Think of it like a buffet line where a few guests fill their plates with too much food, blocking everyone else from getting a bite — that's what this vulnerability does to Vault's processing capabilities! This vulnerability arises from a regression in a previous fix that failed to apply rate limits while processing complex JSON payloads, allowing malicious payloads to trigger denial of service conditions.
An attacker could overwhelm the system with unauthenticated requests, causing a denial of service that prevents legitimate users from accessing critical data. Imagine your entire team unable to access their vaults because of a single heavy-handed request — absolutely devastating! To safeguard your Vault, update to Vault Community Edition 1.21.0 or Vault Enterprise 1.16.27, 1.19.11, or 1.20.5 immediately. Additionally, review your rate limiting settings to ensure they’re properly configured. You've got this! With the right updates, you can keep your Vault secure and operational! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| hashicorp/vault | ≥ 1.16.25, < 1.16.27 | 1.16.27 |
| hashicorp/vault | ≥ 1.18.14, ≤ 1.18.15 | — |
| hashicorp/vault | ≥ 1.19.9, ≤ 1.19.11 | — |
| hashicorp/vault | ≥ 1.20.3, < 1.20.5 | 1.20.5 |
| hashicorp/vault | ≥ 1.20.3, < 1.21.0 | 1.21.0 |