Threats tagged 'bit-vault-2025-6000'

CVE-2025-6000 is a critical code injection vulnerability in HashiCorp Vault that allows a privileged Vault operator with write permission to the sys/audit path in the root namespace to execute arbitrary code on the underlying host if a plugin directory is configured. This vulnerability affects certain versions of Vault and has been fixed in multiple patched releases.