HashiCorp security advisory (AV25-701)

Serial number: AV25-701
Date: October 28, 2025

On October 23, 2025, HashiCorp published security advisories to address vulnerabilities in the following products:

• Vault Community – versions prior to 1.21.0
• Vault Enterprise – versions prior to 1.21.0, 1.20.5, 1.19.11 and 1.16.27

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• HCSEC-2025-31 - Vault Vulnerable to Denial of Service Due to Rate Limit Regression
• HCSEC-2025-30 - Vault AWS Auth Method Authentication Bypass Through Mishandling of Cache Entries