CVE-2021-27668: Hashicorp Vault

Medium severity, CVSS 5.3. EPSS: 1% chance of exploitation in the next 30 days.

HashiCorp Vault Enterprise 0.9.2 through 1.6.2 allowed the read of license metadata from DR secondaries without authentication. Fixed in 1.6.3.

Affected products

• Hashicorp Vault: from 0.9.2, before 1.6.3 (fixed in 1.6.3)

Published 2021-08-31. Last modified 2026-06-17.