{"uuid": "4aa3f217-25c6-44ef-8312-8ed814711679", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-13357", "type": "seen", "source": "https://t.me/pphm_HackerNews/1152", "content": "Critical LDAP Misconfiguration Opens Vault Secrets to Unauthenticated Access\n\nA high-severity vulnerability tracked as CVE-2025-13357 has been identified in Vault deployments configured to authenticate users through LDAP. The flaw stems from an unsafe default setting that allows a NULL bind\u2014meaning an LDAP connection can be established without any credentials at all. In Vault environments where this default was never changed, an attacker could potentially connect to the directory service and gain access to Vault resources without providing a username or password.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-23T00:00:25.691580Z"}