GO-2025-3836

Affected Products

Timeline

• Aug 11, 2025 CVE Published
• Feb 4, 2026 CVE Updated
• May 1, 2026 Security Advisory

References

• https://github.com/advisories/GHSA-6c5r-4wfc-3mcx advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-6037 advisory
• https://discuss.hashicorp.com/t/hcsec-2025-18-vault-certificate-auth-method-did-not-validate-common-name-for-non-ca-certificates/76037 url