AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

VaultGHSA-qv95-g3gm-x542

Hashicorp Vault Privilege Escalation Vulnerability

Vault

CVE-2021-41802 · Published Oct 12, 2021 · updated Sep 10, 2026

Low2.9
Fix: upgrade to 1.7.5 or later (2 fixed versions below)
GitHub advisory

HashiCorp Vault and Vault Enterprise through 1.7.4 and 1.8.3 allowed a user with write permission to an entity alias ID sharing a mount accessor with another user to acquire this other user’s policies by merging their identities. Fixed in Vault and Vault Enterprise 1.7.5 and 1.8.4.

Affected versions

PackageAffectedFixed in
github.com/hashicorp/vault
Go
< 1.7.51.7.5
>= 1.8.0, < 1.8.41.8.4
Details and references
CVSS 3.1
CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:C/C:L/I:N/A:N
Severity from
GitHub (reviewed advisory)
Weakness
CWE-269, CWE-732
Also known as
BIT-vault-2021-41802, CVE-2021-41802, GO-2022-0618

More Vault advisories

All Vault
Critical 9.1Dec 2, 2021HashiCorp Vault Incorrect Permission Assignment for Critical ResourceCVE-2021-43998fixed in 1.7.6 +1High 8.1Oct 12, 2021Incorrect Privilege Assignment in HashiCorp VaultCVE-2021-42135no fix yetCritical 9.8Aug 30, 2021HashiCorp Vault underlying database had excessively broad filesystem permissions from v1.4.0 until v1.8.0CVE-2021-38553fixed in 1.8.0Medium 5.3Aug 30, 2021Improper Removal of Sensitive Information Before Storage or Transfer in HashiCorp VaultCVE-2021-38554fixed in 1.6.6 +1High 8.2Aug 2, 2021Authentication Bypass by Spoofing and Insufficient Verification of Data Authenticity in Hashicorp VaultCVE-2020-16250fixed in 1.2.5 +3High 7.5Jul 28, 2021Improper Resource Shutdown or Release in HashiCorp VaultCVE-2020-7220fixed in 1.3.2