Threats tagged 'bit-vault-2025-4656'

CVE-2025-4656 is a low-severity vulnerability in HashiCorp Vault affecting rekey and recovery key operations. It involves synchronous access of a remote resource without a timeout, which can lead to denial of service caused by uncontrolled cancellation by a Vault operator. The vulnerability has been fixed in Vault Community Edition 1.20.0 and several Enterprise versions.