CVE-2024-7594: hashicorp vault
Vulnerability summary
CVE-2024-7594 is a high (CVSS 8.8) vulnerability in hashicorp vault. EPSS estimates a 0.27% chance of exploitation in the next 30 days, higher than 17.8% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 3 · Related 5Timeline
- 26-09-2024PublishedVulnerability first disclosed.
- 10-01-2025Last modifiedVulnerability information updated.
Description
Vault’s SSH secrets engine did not require the valid_principals list to contain a value by default. If the valid_principals and default_user fields of the SSH secrets engine configuration are not set, an SSH certificate requested by an authorized user to Vault’s SSH secrets engine could be used to authenticate as any user on the host. Fixed in Vault Community Edition 1.17.6, and in Vault Enterprise 1.17.6, 1.16.10, and 1.15.15.
CVSS metrics
5 scores · 4 sources · 2 versions- CVE.orgCNA7.5HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HDiffers
- OSV · GoEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HDiffers
- OSV · ChainguardEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HDiffers
EPSS trend
Probability
0.27%
Chance of exploitation in the next 30 days
Percentile
18%
Versus all other CVEs
30-day change
0.00 pp
From 0.27% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Chainguard3 products
- vault-1.16All versions (No fix recorded)
- vault-1.17< 1.17.6-r9
- vault-1.17-compat< 1.17.6-r9
Hashicorp2 products
- vault≥ 1.7.7, < 1.15.15 | ≥ 1.7.7, < 1.17.6 | ≥ 1.16.0, < 1.16.10 | ≥ 1.17.0, < 1.17.6
- vault enterprise≥ 1.7.7, < 1.17.6
Github.com/hashicorp1 product
- vault≥ 1.7.7, < 1.17.6
Github.com/openbao1 product
- openbao≥ 0.1.0 (No fix recorded) | < 0.0.0-20241003222810-d5b4e9224698
Openbao1 product
- openbao< 2.0.2
5 vendors · 8 products
References
11 links
- github.com/hashicorp/vaultPACKAGE