Critical Zero-Day Flaws Exposed in Key Password Vaults at Black Hat 2025

At the Black Hat USA 2025 conference, researchers identified nine zero-day vulnerabilities in HashiCorp Vault and five in CyberArk Conjur, two essential secret management platforms used in enterprise security. These vulnerabilities pose significant risks, as they could allow attackers to compromise entire networks by exploiting flaws in authentication processes and privilege escalation methods. Notably, the weaknesses in CyberArk Conjur include an alarming authentication-less remote code execution exploit, raising urgent concerns about the integrity of sensitive information. Healthcare professionals should recognize the implications of these vulnerabilities, as they highlight critical areas for improving security measures in systems that safeguard patient and organizational data.

Opens on Dark Reading