CVE-2025-59048

OpenBao's AWS Plugin generates AWS access credentials based on IAM policies. Prior to version 0.1.1, the AWS Plugin is vulnerable to cross-account IAM role Impersonation in the AWS auth method. The vulnerability allows an IAM role from an untrusted AWS account to authenticate by impersonating a role with the same name in a trusted account, leading to unauthorized access. This impacts all users of the auth-aws plugin who operate in a multi-account AWS environment where IAM role names may not be unique across accounts. This vulnerability has been patched in version 0.1.1 of the auth-aws plugin. A workaround for this issue involves guaranteeing that IAM role names are unique across all AWS accounts that could potentially interact with your OpenBao environment, and to audit for any duplicate IAM roles.

• CWE-694
• CWE-863

• https://github.com/openbao/openbao-plugins/commit/2a77af36834746ca6d3ac9bd1049154c84b3efaePatch
• https://github.com/openbao/openbao-plugins/security/advisories/GHSA-jp7h-4f3c-9rc7Patch, Vendor Advisory

Published

Oct 23, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-59042PyInstaller bundles a Python application and all its depende…7
• CVE-2025-59043OpenBao is an open source identity-based secrets management …7.5
• CVE-2025-59044Himmelblau is an interoperability suite for Microsoft Azure …4.4
• CVE-2025-59045Stalwart is a mail and collaboration server. Starting in ver…7.1
• CVE-2025-59046The npm package `interactive-git-checkout` is an interactive…9.8
• CVE-2025-59047matrix-sdk-base is the base component to build a Matrix clie…2.7
• CVE-2025-59049Mockoon provides way to design and run mock APIs. Prior to v…7.5
• CVE-2025-5905A vulnerability was found in TOTOLINK T10 4.1.8cu.5207. It h…8.8
• CVE-2025-59050Greenshot is an open source Windows screenshot utility. Gree…7.8
• CVE-2025-59051The FreePBX Endpoint Manager module includes a Network Scann…8.6
• CVE-2025-59052Angular is a development platform for building mobile and de…7.1
• CVE-2025-59053AIRI is a self-hosted, artificial intelligence based Grok Co…9.6