Known Vulnerabilities for Hashicorp Vault by Jenkins
Listed below are 6 of the newest known vulnerabilities associated with "Hashicorp Vault" by "Jenkins".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-97636 json | Apache Airflow HashiCorp provider: the HashiCorp Vault secrets backend's team-scope guard can be bypassed with a user-control... | Not Provided | 2026-09-24 | 2026-09-25 |
| CVE-2026-94416 json | An authorization bypass was found in the Ansible Automation Platform (AAP) gateway. The gateway API allows an authenticated a... | Not Provided | 2026-09-24 | 2026-10-21 |
| CVE-2026-55102 json | hashi-vault-js is a Node.js module for interacting with the HashiCorp Vault API. Prior to 0.5.2, every API method in src/Vaul... | Not Provided | 2026-09-14 | 2026-09-14 |
| CVE-2026-55100 json | hashi-vault-js is a Node.js module for interacting with the HashiCorp Vault API. Prior to 0.5.2, src/Vault.js concatenates un... | Not Provided | 2026-07-31 | 2026-07-31 |
| CVE-2026-15911 json | Confluent Kafka Python client's HashiCorp Vault KMS integration could allow a remote attacker to obtain sensitive information... | Not Provided | 2026-10-01 | 2026-10-06 |
| CVE-2026-12564 json | A flaw was found in the AAP Controller's HashiCorp Vault credential plugin. The kubernetes_auth() function in awx_plugins/cre... | Not Provided | 2026-08-18 | 2026-09-24 |
| CVE-2026-5006 json | A vulnerability was identified in HashiCorp Vault and Vault Enterprise (“Vault”) such that an authenticated attacker may ... | Not Provided | 2026-08-24 | 2026-08-26 |
| CVE-2025-67642 json | Not Provided | 2025-12-10 | 2026-10-14 | |
| CVE-2023-33001 json | Jenkins HashiCorp Vault Plugin 360.v0a_1c04cf807d and earlier does not properly mask (i.e., replace with asterisks) credentia... | 7.5 - HIGH | 2023-05-16 | 2023-05-25 |
| CVE-2022-36888 json | A missing permission check in Jenkins HashiCorp Vault Plugin 354.vdb_858fd6b_f48 and earlier allows attackers with Overall/Re... | 6.5 - MEDIUM | 2022-07-27 | 2023-11-22 |