CVE-2025-59048 PUBLISHED CVSS 8.100000381469727 HIGH

OpenBao AWS Plugin Vulnerable to Cross-Account IAM Role Impersonation in AWS Auth Method

EPSS 0.03% · 9.9th percentile

Risk Scores

CVSS v3.1
8.100000381469727
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
EPSS Score
0.03%
9.9th percentile

Affected Products

VendorProductVersions
github.comopenbao/openbao-plugins0
openbaoaws_plugin0
openbaoopenbao-plugins< 0.1.1

Timeline

References

Open in Interactive Console →