CyberRota Analysis
AI-GeneratedVaultwarden versions up to 1.37.3 are vulnerable due to inadequate validation of organization membership status, enabling revoked or unconfirmed members to retain unauthorized access to sensitive cipher data. This flaw allows attackers to exploit three specific queries, potentially leading to unauthorized read, write, delete, and attachment capabilities on protected data. Organizations using Vaultwarden should prioritize patching this vulnerability to safeguard their cipher data from unauthorized access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Vaultwarden through 1.37.3 omits organization membership status validation from three cipher access-restriction queries, allowing revoked and not-yet-confirmed members to retain read, write, delete, and attachment access to organization ciphers. Attackers with revoked or pending membership can exploit missing status filters in get_user_collections_access_flags, get_group_collections_access_flags, and is_in_full_access_group to access protected cipher data server-side.