Vault Community and Vault Enterprise rekey and recovery key operations can lead to a denial of service due to uncontrolled cancellation by a Vault operator. This vulnerability (CVE-2025-4656) has been remediated in Vault Community Edition 1.20.0 and Vault Enterprise 1.20.0, 1.19.6, 1.18.11, 1.17.17, and 1.16.22.
{ "nvd_published_at": "2025-06-25T17:15:38Z", "severity": "LOW", "github_reviewed_at": "2025-06-27T21:43:29Z", "github_reviewed": true, "cwe_ids": [ "CWE-1088" ] }