Vulnerability record · CVE-2025-12044 · published 23 October 2025

CVE-2025-12044: Hashicorp vault allocation without limits vulnerability

Hashicorp · Vault

Vault and Vault Enterprise (“Vault”) are vulnerable to an unauthenticated denial of service when processing JSON payloads. This occurs due to a regression from a previous fix for [+HCSEC-2025-24+|https://discuss.hashicorp.com/t/hcsec-2025-24-vault-denial-of-service-though-complex-json-payloads/76393] which allowed for processing JSON payloads before applying rate limits. This vulnerability, CVE-2025-12044, is fixed in Vault Community Edition 1.21.0 and Vault Enterprise 1.16.27, 1.19.11, 1.20.5, and 1.21.0.

7.5 CVSS 3.1 High EPSS 0.53% · top 57.4% CWE-770 · Allocation without limits

7.5CVSS 3.1 base score

0.53%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

1References

17 Jun 2026Last modified by NVD

Description

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Vault Hashicorp

References

Link	Tags
https://discuss.hashicorp.com/t/hcsec-2025-31-vault-vulnerable-to-denial-of-service-due-to-rate-limit-regression/76710	Vendor Advisory

Track CVE-2025-12044 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2024-2048Hashicorp vault improper certificate validation vulnerabilityVault and Vault Enterprise (“Vault”) TLS certificate auth method did not correctly validate client certificates when configured with a non-CA certifi…EPSS 0.45%4 Mar 2024 9.8CVE-2020-35192Hashicorp vault missing authentication for critical function vulnerabilityThe official vault docker images before 0.11.6 contain a blank password for a root user. System using the vault docker container deployed by affected…EPSS 2.9%17 Dec 2020 9.8CVE-2020-12757Hashicorp vault improper privilege management vulnerabilityHashiCorp Vault and Vault Enterprise 1.4.0 and 1.4.1, when configured with the GCP Secrets Engine, may incorrectly generate GCP Credentials with the …EPSS 1.5%10 Jun 2020 9.1CVE-2025-6000Hashicorp vault code injection vulnerabilityA privileged Vault operator within the root namespace with write permission to {{sys/audit}} may obtain code execution on the underlying host if a pl…EPSS 0.91%1 Aug 2025 9.1CVE-2022-40186Hashicorp vault insecure direct object reference vulnerabilityAn issue was discovered in HashiCorp Vault and Vault Enterprise before 1.11.3. A vulnerability in the Identity Engine was found where, in a deploymen…EPSS 1.00%22 Sep 2022 9.1CVE-2022-36129Hashicorp vault missing authentication for critical function vulnerabilityHashiCorp Vault Enterprise 1.7.0 through 1.9.7, 1.10.4, and 1.11.0 clusters using Integrated Storage expose an unauthenticated API endpoint that coul…EPSS 1.6%26 Jul 2022 9.1CVE-2020-10661Hashicorp vault vulnerabilityHashiCorp Vault and Vault Enterprise versions 0.11.0 through 1.3.3 may, under certain circumstances, have existing nested-path policies grant access …EPSS 1.1%23 Mar 2020 8.8CVE-2026-4525Hashicorp vault vulnerabilityIf a Vault auth mount is configured to pass through the "Authorization" header, and the "Authorization" header is used to authenticate to Vault, Vaul…EPSS 0.59%17 Apr 2026

Source: NIST National Vulnerability Database (record CVE-2025-12044), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.