UpHeron
All vulnerabilities

Servers and applications

CVE-2025-52893

May Leak Sensitive Information in Logs When Processing Malformed Data

Severity
Medium 4.5
Published
25 Jun 2025
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
2.3.0
Also known as
GHSA-8f5r-8cmq-7fmq
Sources
NVD, Project advisories (GitHub)

Description

OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. OpenBao before v2.3.0 may leak sensitive information in logs when processing malformed data. This is separate from the earlier HCSEC-2025-09 / CVE-2025-4166. This issue has been fixed in OpenBao v2.3.0 and later. Like with HCSEC-2025-09, there is no known…

Affected software

SoftwareAffected versions
OpenBaoServers and applications · cpe:a:openbao:openbao
  • Every version before 2.3.0
OpenBaoServers and applications · github:openbao/openbao
  • Every version before 2.3.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2025-52893
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-52893
  • GitHub Advisory Database https://github.com/advisories/GHSA-8f5r-8cmq-7fmq
  • github.com https://github.com/openbao/openbao/security/advisories/GHSA-8f5r-8cmq-7fmq