CVE-2023-5834: Hashicorp Vagrant

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

HashiCorp Vagrant's Windows installer targeted a custom location with a non-protected path that could be junctioned, introducing potential for unauthorized file system writes. Fixed in Vagrant 2.4.0.

Affected products

• Hashicorp Vagrant: before 2.4.0 (fixed in 2.4.0)

Published 2023-10-27. Last modified 2026-06-17.