{"id":"EUVD-2025-198991","enisaUuid":"acc41c69-21ad-3297-990e-439f51158ef7","description":"OpenBao is an open source identity-based secrets management system. Prior to version 2.4.4, a privileged operator could use the identity group subsystem to add a root policy to a group identity group, escalating their or another user\u0027s permissions in the system. Specifically this is an issue when: an operator in the root namespace has access to identity/groups endpoints and an operator does not have policy access. Otherwise, an operator with policy access could create or modify an existing policy to grant root-equivalent permissions through the sudo capability. This issue has been patched in version 2.4.4.","datePublished":"Nov 25, 2025, 12:01:17 AM","dateUpdated":"Feb 26, 2026, 4:07:37 PM","baseScore":7.5,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","references":"https://github.com/openbao/openbao/security/advisories/GHSA-7ff4-jw48-3436\nhttps://github.com/openbao/openbao/pull/2143\nhttps://github.com/openbao/openbao/commit/16bb0ccd37a502930a289d434cbe4e7b4edd66e5\n","aliases":"CVE-2025-64761\nGHSA-7ff4-jw48-3436\n","assigner":"GitHub_M","epss":0.39,"enisaIdProduct":[{"id":"d8c3c795-4148-326b-a4a5-e90ceb580b0a","product":{"name":"openbao","vendor":{"name":"openbao"}},"product_version":"\u003c 2.4.4"}],"enisaIdVendor":[{"id":"9b58bc21-76b3-3d25-9b27-fc21673e0faa","vendor":{"name":"openbao"}}],"enisaIdVulnerability":[{"id":"99fa49bd-83d4-3da3-87d9-ca1bb03ab834","vulnerability":{"id":"CVE-2025-64761","description":"OpenBao is an open source identity-based secrets management system. Prior to version 2.4.4, a privileged operator could use the identity group subsystem to add a root policy to a group identity group, escalating their or another user\u0027s permissions in the system. Specifically this is an issue when: an operator in the root namespace has access to identity/groups endpoints and an operator does not have policy access. Otherwise, an operator with policy access could create or modify an existing policy to grant root-equivalent permissions through the sudo capability. This issue has been patched in version 2.4.4.","datePublished":"Nov 25, 2025, 12:01:17 AM","dateUpdated":"Feb 26, 2026, 4:07:37 PM","status":"PUBLISHED","baseScore":7.5,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","references":"https://github.com/openbao/openbao/security/advisories/GHSA-7ff4-jw48-3436\nhttps://github.com/openbao/openbao/pull/2143\nhttps://github.com/openbao/openbao/commit/16bb0ccd37a502930a289d434cbe4e7b4edd66e5\n","enisa_id":"EUVD-2025-198991\n","assigner":"GitHub_M","epss":0.39,"dataProcessed":"Nov 6, 2026, 7:21:23 AM","vulnerabilityProduct":[{"id":"c502149b-a856-3096-bb88-6a2d137cf669","product":{"name":"openbao","vendor":{"name":"openbao"}},"product_version":"\u003c 2.4.4"}],"vulnerabilityVendor":[{"id":"dd50cdc0-4fb8-3642-9f90-5dadb18bebac","vendor":{"name":"openbao"}}]}},{"id":"9d756157-f20b-3d7f-b20c-aa7f804331ee","vulnerability":{"id":"GHSA-7ff4-jw48-3436","description":"OpenBao is Vulnerable to Privileged Operator Identity Group Root Escalation","datePublished":"Nov 24, 2025, 9:51:18 PM","dateUpdated":"Nov 27, 2025, 7:58:33 AM","baseScore":0.0,"references":"https://github.com/openbao/openbao/security/advisories/GHSA-7ff4-jw48-3436\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-64761\nhttps://github.com/openbao/openbao/pull/2143\nhttps://github.com/openbao/openbao/commit/16bb0ccd37a502930a289d434cbe4e7b4edd66e5\nhttps://github.com/openbao/openbao/commit/747a1378c2756f86296ad9450f74f6faeecc2eb7\nhttps://github.com/openbao/openbao\nhttps://github.com/openbao/openbao/releases/tag/v2.4.4\n","enisa_id":"EUVD-2025-198991\n","aliases":"GHSA-7ff4-jw48-3436\nCVE-2025-64761\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 1:56:19 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[{"id":"4e3e26a9-2976-34d9-8960-35ea6f5cee23","advisory":{"id":"openSUSE-SU-2025:15767-1","description":"openbao-2.4.4-1.1 on GA media","summary":"openbao-2.4.4-1.1 on GA media","datePublished":"Nov 25, 2025, 12:00:00 AM","dateUpdated":"Sep 20, 2026, 9:45:38 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2025_15767-1.json\nhttps://www.suse.com/security/cve/CVE-2025-64761/\n","aliases":"CVE-2025-64761\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"04c93314-1fc8-33f5-94ac-74a2c82bd500","product":{"name":"openbao-mysql-database-plugin-0:2.4.4-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"0cb65cdd-4169-32e9-b082-266a1e197507","product":{"name":"openbao-agent-2.4.4-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"0fc11241-aed9-3acb-bcf0-05ddbe4ad966","product":{"name":"openbao-mysql-legacy-database-plugin-2.4.4-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"11b7e7e5-a5fa-38ca-a175-dbead280091a","product":{"name":"openbao-mysql-legacy-database-plugin-0:2.4.4-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"1750b533-1142-3a19-9471-d93048851bd9","product":{"name":"openbao-server-0:2.4.4-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"196adb26-5704-3dc0-9d03-360a76065753","product":{"name":"openbao-influxdb-database-plugin-2.4.4-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"19d0b399-4fb2-3ca6-9e43-71342ff7746a","product":{"name":"openbao-server-2.4.4-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"1d7f7659-ef1e-351a-9de7-41f98b0e2044","product":{"name":"openbao-influxdb-database-plugin-0:2.4.4-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"23681a83-8550-3966-9f45-81660d532b1f","product":{"name":"openbao-cassandra-database-plugin-2.4.4-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"26a62854-46a9-333c-91b5-5ff9f0e7c9fa","product":{"name":"openbao-agent-0:2.4.4-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"2f9e4953-fa4e-3478-b060-7530547bf024","product":{"name":"openbao-server-0:2.4.4-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"31078812-b9d2-37a9-bb10-553c1db54682","product":{"name":"openbao-2.4.4-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"323c12a8-32e4-339e-8900-75fd5eabc819","product":{"name":"openbao-2.4.4-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"3beeb04b-409c-3725-8b8b-ef5dce962fac","product":{"name":"openbao-cassandra-database-plugin-0:2.4.4-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"3dffe7c9-e10f-32a3-9314-905ebacf3f76","product":{"name":"openbao-mysql-database-plugin-2.4.4-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"3ef485f7-4d9d-3ae6-bece-8fe683da17c3","product":{"name":"openbao-server-2.4.4-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"3efa0550-4cde-3c85-8aff-6fc0c5790827","product":{"name":"openbao-influxdb-database-plugin-2.4.4-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"40e3286a-96ee-395e-b0e8-0b3d33173c51","product":{"name":"openbao-mysql-legacy-database-plugin-2.4.4-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"44625768-6d82-364a-9ea2-2674922cd804","product":{"name":"openbao-0:2.4.4-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"47b89b51-1301-3584-9c22-2e0a93153c23","product":{"name":"openbao-mysql-legacy-database-plugin-0:2.4.4-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"485fa559-82aa-3e0d-9c54-2253ce8f93ab","product":{"name":"openbao-mysql-legacy-database-plugin-0:2.4.4-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"4a79673a-6301-3ace-987a-0b7b201a9316","product":{"name":"openbao-mysql-legacy-database-plugin-0:2.4.4-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"4c8b97a8-f020-3106-a3fa-3a1cb98ac7f3","product":{"name":"openbao-influxdb-database-plugin-2.4.4-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"4e8e0a72-c451-3946-a0ce-594880b17d61","product":{"name":"openbao-influxdb-database-plugin-0:2.4.4-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"57a3ff42-c7f3-3d87-84a9-d423169f76c1","product":{"name":"openbao-cassandra-database-plugin-2.4.4-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"59ca819d-fc0a-3b53-be1d-fbd400303297","product":{"name":"openbao-mysql-database-plugin-0:2.4.4-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"5bc4458a-2ffe-3c0d-ad02-5286da963582","product":{"name":"openbao-mysql-database-plugin-0:2.4.4-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"5d37417d-e529-39e7-9a1c-0bddc00bb171","product":{"name":"openbao-agent-0:2.4.4-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"5ff29400-cc89-3e7c-a778-6867d0d6f2a5","product":{"name":"openbao-postgresql-database-plugin-2.4.4-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"630fd137-949f-36a2-b319-2cbb5dca29ac","product":{"name":"openbao-cassandra-database-plugin-0:2.4.4-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"6ed113fe-bf41-3477-8915-a61a7e0ea0ae","product":{"name":"openbao-agent-2.4.4-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"76465e93-0fca-32ae-834e-bbc93a4e6c24","product":{"name":"openbao-agent-2.4.4-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"77cbf1f8-38e0-37cf-9203-aa93ed251f91","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"7853a526-888a-3bc9-81a6-e0e75959f084","product":{"name":"openbao-0:2.4.4-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"7a1242df-f6b2-3e2a-8874-d80bf383088f","product":{"name":"openbao-postgresql-database-plugin-2.4.4-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"7f331493-c5e9-3cfa-9cee-92b955fb93f0","product":{"name":"openbao-influxdb-database-plugin-2.4.4-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"836a8360-c079-35a2-94fd-a622bf276ad4","product":{"name":"openbao-cassandra-database-plugin-0:2.4.4-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"84532d2c-b41c-32a6-b79d-0baf28e680e0","product":{"name":"openbao-postgresql-database-plugin-0:2.4.4-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"8cf9b1b4-02d4-3a2e-b460-47338a74949d","product":{"name":"openbao-mysql-database-plugin-2.4.4-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"8db25847-ed9b-3d76-9e9e-9c98c3325735","product":{"name":"openbao-influxdb-database-plugin-0:2.4.4-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"8f2e6552-d1c5-3070-8b90-460d246576bf","product":{"name":"openbao-agent-0:2.4.4-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"8ff16d45-4117-3aef-b867-ba4fa38af0c0","product":{"name":"openbao-agent-0:2.4.4-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"9643c3e1-de96-391b-b661-0e135e66c44b","product":{"name":"openbao-2.4.4-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"9e7cdae0-99e3-30d5-bda1-6ded28bbbe05","product":{"name":"openbao-postgresql-database-plugin-2.4.4-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"9ed8fe44-485e-3169-9bb8-21daf1d0b04e","product":{"name":"openbao-cassandra-database-plugin-2.4.4-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"9fc59a58-a28f-3f04-a5a9-b2970697a513","product":{"name":"openbao-mysql-database-plugin-2.4.4-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"a3e1c3ad-0241-3482-8097-1c11aa5094b1","product":{"name":"openbao-mysql-database-plugin-0:2.4.4-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"a8587e29-56aa-3ebd-85f3-d218d5333d0d","product":{"name":"openbao-postgresql-database-plugin-0:2.4.4-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"ac522d67-b079-3ddc-be2e-fecb234f74d8","product":{"name":"openbao-2.4.4-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"b65ad9e7-83e3-39a0-88ab-78201a3c349b","product":{"name":"openbao-server-0:2.4.4-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"bdc20aa3-2c00-3607-aee7-462e55a68bdd","product":{"name":"openbao-server-2.4.4-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"cf87c465-56c4-32e1-8b40-c11aca055ee9","product":{"name":"openbao-agent-2.4.4-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"d0a2c5a4-bb72-3793-8011-b8390400a80c","product":{"name":"openbao-server-2.4.4-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"d0f1d8c9-003c-3db6-b06f-25d72e990599","product":{"name":"openbao-0:2.4.4-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"d5c0198d-ced6-376a-af5c-a32a8488ae14","product":{"name":"openbao-server-0:2.4.4-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"dbca381c-62c3-31b1-becc-f6c4884e049f","product":{"name":"openbao-mysql-legacy-database-plugin-2.4.4-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"dd961dc8-3203-39b1-8537-ef167ec8e45c","product":{"name":"openbao-mysql-database-plugin-2.4.4-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"ddeeda65-da37-3b0e-bf1e-6ac18d7f7984","product":{"name":"openbao-0:2.4.4-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"de42f43b-f581-34b6-84c8-261c8c971b09","product":{"name":"openbao-postgresql-database-plugin-0:2.4.4-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"e0d1a318-4f1e-3bd5-8b4d-d327b2ccb371","product":{"name":"openbao-postgresql-database-plugin-0:2.4.4-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"e6bb7406-184d-3e1b-87e1-2cfb1166d4d0","product":{"name":"openbao-cassandra-database-plugin-2.4.4-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"e6f5a45b-8ffb-395f-9c4c-feae3054cb67","product":{"name":"openbao-postgresql-database-plugin-2.4.4-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"efc85d2b-2c57-33fe-b944-249ee294aab5","product":{"name":"openbao-influxdb-database-plugin-0:2.4.4-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"f7c08afd-c932-3b17-a9f5-f8e79b9bca0d","product":{"name":"openbao-mysql-legacy-database-plugin-2.4.4-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"fafd70d7-007e-3111-b27a-57d7b471723b","product":{"name":"openbao-cassandra-database-plugin-0:2.4.4-1.1.ppc64le","vendor":{"name":"SUSE"}}}]}}]}