Aws Plugin vulnerabilities

1 known vulnerability in Aws Plugin from Openbao. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  openbao-plugins: Use of Multiple Resources with Duplicate Identifier

  CVE-2025-59048Oct 23, 2025Openbao

  OpenBao's AWS Plugin generates AWS access credentials based on IAM policies. Prior to version 0.1.1, the AWS Plugin is vulnerable to cross-account IAM role Impersonation in the AWS auth method. The vulnerability allows an IAM role from an untrusted AWS account