CVE-2021-38553: Hashicorp Vault

Medium severity, CVSS 4.4. EPSS: 0.3% chance of exploitation in the next 30 days.

HashiCorp Vault and Vault Enterprise 1.4.0 through 1.7.3 initialized an underlying database file associated with the Integrated Storage feature with excessively broad filesystem permissions. Fixed in Vault and Vault Enterprise 1.8.0.

Affected products

• Hashicorp Vault: from 1.4.0, before 1.8.0 (fixed in 1.8.0)

Published 2021-08-13. Last modified 2026-06-17.