CVE-2024-0831: Hashicorp Vault

Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days.

Vault and Vault Enterprise (“Vault”) may expose sensitive information when enabling an audit device which specifies the `log_raw` option, which may log sensitive information to other audit devices, regardless of whether they are configured to use `log_raw`.

Affected products

• Hashicorp Vault: from 1.15.0, before 1.15.5 (fixed in 1.15.5)

Published 2024-02-01. Last modified 2026-06-17.