CVE-2025-6014 – Vault TOTP Secrets Engine Code Reuse Vulnerability

CVE ID : CVE-2025-6014

Published : Aug. 1, 2025, 6:15 p.m. | 1 hour, 22 minutes ago

Description : Vault and Vault Enterprise’s (“Vault”) TOTP Secrets Engine code validation endpoint is susceptible to code reuse within its validity period. Fixed in Vault Community Edition 1.20.1 and Vault Enterprise 1.20.1, 1.19.7, 1.18.12, and 1.16.23.

Severity: 6.5 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…