CVE-2025-54997

Some OpenBao deployments intentionally restrict privileged API operators' ability to execute code at the operating system level and establish network connections. However, an attacker with access to a privileged operator account can bypass both security measures by manipulating log prefixes in the audit subsystem (sys/audit/* endpoints). This mechanism enables unauthorized code execution (RCE) and network access without required authorization. For operators with root access, there is no possibility of applying a policy-based deny workaround.

An attacker with access to a privileged operator account can execute arbitrary code on the host running OpenBao and establish unauthorized network connections, which in a secrets management environment can lead to complete infrastructure compromise and sensitive data leakage.

OpenBao should be updated to version 2.3.2, where the issue has been fixed. As a workaround (not applicable to root operators), access to sys/audit/* endpoints can be blocked using explicit deny policies. Operators with root privileges cannot be restricted this way — an update is required.

OpenBao versions 2.3.1 and earlier, in deployments that intentionally restrict API operators' privileges for system code execution or network connections