CVE-2025-6015 – Vault Two-Factor Authentication Bypass and Token Reuse

CVE ID : CVE-2025-6015

Published : Aug. 1, 2025, 6:15 p.m. | 1 hour, 22 minutes ago

Description : Vault and Vault Enterprise’s (“Vault”) login MFA rate limits could be bypassed and TOTP tokens could be reused. Fixed in Vault Community Edition 1.20.1 and Vault Enterprise 1.20.1, 1.19.7, 1.18.12, and 1.16.23.

Severity: 5.7 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…