CVE-2025-1293

Hermes versions up to 0.4.0 improperly validated the JWT provided when using the AWS ALB authentication mode, potentially allowing for authentication bypass. This vulnerability, CVE-2025-1293, was fixed in Hermes 0.5.0.

CVSS v3 8.2 HIGH

8.2^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 4.7

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References

Link	Resource
https://discuss.hashicorp.com/t/hcsec-2025-03-hashicorp-hermes-improperly-validates-aws-alb-jwts-which-may-lead-to-authentication-bypass/73371	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:hashicorp:hermes:*:*:*:*:*:*:*:*

History

18 Dec 2025, 15:02

Type	Values Removed	Values Added
CPE		cpe:2.3:a:hashicorp:hermes::::::::
Summary		(es) Las versiones de Hermes de hasta 0.4.0 validaron incorrectamente el JWT proporcionado cuando se usa el modo de autenticación AWS Alb, lo que puede permitir el bypass de autenticación. Esta vulnerabilidad, CVE-2025-1293, se fijó en Hermes 0.5.0.
First Time		Hashicorp Hashicorp hermes
References	~~() https://discuss.hashicorp.com/t/hcsec-2025-03-hashicorp-hermes-improperly-validates-aws-alb-jwts-which-may-lead-to-authentication-bypass/73371 -~~	() https://discuss.hashicorp.com/t/hcsec-2025-03-hashicorp-hermes-improperly-validates-aws-alb-jwts-which-may-lead-to-authentication-bypass/73371 - Vendor Advisory

20 Feb 2025, 01:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-02-20 01:15

Updated : 2025-12-18 15:02

NVD link : CVE-2025-1293

Mitre link : CVE-2025-1293

CVE.ORG link : CVE-2025-1293

JSON object : View

Products Affected

hashicorp

hermes

CWE

CWE-1390

Weak Authentication

{"id": "CVE-2025-1293", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "security@hashicorp.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.2, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 4.7, "exploitabilityScore": 2.8}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 4.2, "exploitabilityScore": 3.9}]}, "published": "2025-02-20T01:15:09.950", "references": [{"url": "https://discuss.hashicorp.com/t/hcsec-2025-03-hashicorp-hermes-improperly-validates-aws-alb-jwts-which-may-lead-to-authentication-bypass/73371", "tags": ["Vendor Advisory"], "source": "security@hashicorp.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security@hashicorp.com", "description": [{"lang": "en", "value": "CWE-1390"}]}], "descriptions": [{"lang": "en", "value": "Hermes versions up to 0.4.0 improperly validated the JWT provided when using the AWS ALB authentication mode, potentially allowing for authentication bypass. This vulnerability, CVE-2025-1293, was fixed in Hermes 0.5.0."}, {"lang": "es", "value": "Las versiones de Hermes de hasta 0.4.0 validaron incorrectamente el JWT proporcionado cuando se usa el modo de autenticaci\u00f3n AWS Alb, lo que puede permitir el bypass de autenticaci\u00f3n. Esta vulnerabilidad, CVE-2025-1293, se fij\u00f3 en Hermes 0.5.0."}], "lastModified": "2025-12-18T15:02:46.217", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:hashicorp:hermes:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CFD018EE-EB24-4ADF-BAAB-624B6CAB0198", "versionEndExcluding": "0.5.0"}], "operator": "OR"}]}], "sourceIdentifier": "security@hashicorp.com"}