# HashiCorp in August 2025: incidents, uptime and changes

> HashiCorp in August 2025: 0 incidents on its status page (0 major or critical), 10 CVEs. From Rewindex’s archive of HashiCorp’s status, pricing and policy pages.

Canonical: https://rewindex.com/company/hashicorp/2025/08
Last updated: 2026-09-26T00:10:00Z

- Incidents posted: 0 (major/critical: 0) · Maintenance: 0
- By vendor impact label: none
- Uptime (vendor-reported): — free of major/critical incidents, — free of any incident; outage time 0 min, incident time 0 min (partial month)
- Price changes: 0 · Pricing/legal/trust page changes: 0 · Deprecations: 0 · CVEs: 10
- Previous month: [June 2025](https://rewindex.com/company/hashicorp/2025/06.md) · Next: [October 2025](https://rewindex.com/company/hashicorp/2025/10.md) · [All months](https://rewindex.com/company/hashicorp/reports.md) · [HashiCorp](https://rewindex.com/company/hashicorp.md)

_Uptime: Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours._

## All incidents

_No incidents posted this month._

## CVEs published

- [CVE-2025-5999](https://rewindex.com/cve/CVE-2025-5999.md) Vault Root Namespace Operator May Elevate Token Privileges (CVSS 7.2), published 2025-08-01
- [CVE-2025-6000](https://rewindex.com/cve/CVE-2025-6000.md) Arbitrary Remote Code Execution via Plugin Catalog Abuse (CVSS 9.1), published 2025-08-01
- [CVE-2025-6014](https://rewindex.com/cve/CVE-2025-6014.md) Vault TOTP Secrets Engine Code Reuse (CVSS 6.5), published 2025-08-01
- [CVE-2025-6037](https://rewindex.com/cve/CVE-2025-6037.md) Vault Certificate Auth Method Did Not Validate Common Name For Non-CA Certificates (CVSS 6.8), published 2025-08-01
- [CVE-2025-6004](https://rewindex.com/cve/CVE-2025-6004.md) Vault Userpass and LDAP User Lockout Bypass (CVSS 5.3), published 2025-08-01
- [CVE-2025-6011](https://rewindex.com/cve/CVE-2025-6011.md) Timing Side-Channel in Vault’s Userpass Auth Method (CVSS 3.7), published 2025-08-01
- [CVE-2025-6015](https://rewindex.com/cve/CVE-2025-6015.md) Vault Login MFA Bypass of Rate Limiting and TOTP Code Reuse (CVSS 5.7), published 2025-08-01
- [CVE-2025-6013](https://rewindex.com/cve/CVE-2025-6013.md) Vault LDAP MFA Enforcement Bypass When Using Username As Alias (CVSS 6.5), published 2025-08-06
- [CVE-2025-8959](https://rewindex.com/cve/CVE-2025-8959.md) HashiCorp go-getter Vulnerable to Arbitrary Read through Symlink Attack (CVSS 7.5), published 2025-08-15
- [CVE-2025-6203](https://rewindex.com/cve/CVE-2025-6203.md) Vault unauthenticated denial of service through complex json payload (CVSS 7.5), published 2025-08-28

## Cite this

HashiCorp posted 0 status incidents in August 2025 (0 major or critical); 0 price changes and 0 notable page changes observed.

- Canonical URL: https://rewindex.com/company/hashicorp/2025/08
- Citation: HashiCorp, “HashiCorp in August 2025” (2025-08-01 00:00 UTC). Archived by Rewindex: https://rewindex.com/company/hashicorp/2025/08 (CC BY 4.0).
- Markdown link: `[HashiCorp: HashiCorp in August 2025 (2025-08-01)](https://rewindex.com/company/hashicorp/2025/08)`


---
Canonical: https://rewindex.com/company/hashicorp/2025/08 · Markdown: https://rewindex.com/company/hashicorp/2025/08.md · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-04T13:28:59.529Z