CVE-2025-67642
Medium · 4.3Jenkins HashiCorp Vault Plugin exposes system-scoped Vault credentials
CVSS
4.3
EPSS
0.2%
Published
Dec 10, 2025
CISA due date
—
The record
Jenkins HashiCorp Vault Plugin 371.v884a_4dd60fb_6 and earlier does not set the appropriate context for Vault credentials lookup, allowing attackers with Item/Configure permission to access and potentially capture Vault credentials they are not entitled to.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Maven | com.datapipe.jenkins.plugins:hashicorp-vault-plugin | 0 | No fix |
Related vulnerabilities
- CVE-2026-40214 In OpenStack Cyborg before 16.0.1, the Accelerator Request (ARQ) API does not enforce… CWE-282
- CVE-2026-3867 An improper ownership management vulnerability has been identified in Moxa’s Secure… CWE-282
- CVE-2026-23514 Kiteworks is a private data network (PDN). CWE-282
- CVE-2026-38739 ezsystems/ezpublish-legacy has a SQL injection in dfscleanup CWE-937
- CVE-2026-47121 Sparkle: Binary delta apply intermediate-symlink traversal in malicious .delta CWE-937
- CVE-2026-47255 AgenticMail API/storage and outbound relay hardening fixes CWE-937
- CVE-2026-47122 Sparkle's AppInstaller post-stage-1 XPC listener accepts unvalidated connections… CWE-937
- CVE-2026-47695 CC-Tweaked has an SSRF Protection Bypass with NAT64 CWE-937