CVE-2024-9180

HIGH

OpenBao < 2.0.3 and Vault 1.17.7-1.17.6, 1.18.0-1.17.9, <1.18.0 - Privilege Escalation via Identity Endpoint

Title source: llm
STIX 2.1

Description

A privileged Vault operator with write permissions to the root namespace’s identity endpoint could escalate their own or another user’s privileges to Vault’s root policy. Fixed in Vault Community Edition 1.18.0 and Vault Enterprise 1.18.0, 1.17.7, 1.16.11, and 1.15.16.

References (1)

Core 1

Scores

CVSS v3 7.2
EPSS 0.0030
EPSS Percentile 53.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-266
Status published
Products (5)
hashicorp/vault 0 - 1.18.0Go
hashicorp/vault 1.7.7 - 1.17.7
hashicorp/vault 1.7.7 - 1.18.0
openbao/openbao < 2.0.3
openbao/openbao 0 - 2.0.3Go
Published Oct 10, 2024
Tracked Since Feb 18, 2026