CVE-2021-43837

CVE-2021-43837 is a critical remote code execution (RCE) vulnerability affecting vault-cli versions prior to 3.0.0. It arises from the tool's ability to interpret secrets prefixed with "!template!" as Jinja2 templates, which can be exploited if an attacker can manipulate vault secret values. With a CVSS score of 9.1 (CRITICAL), the vulnerability has a network attack vector, low attack complexity, and can lead to complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or publicly available exploit code, the vulnerability has garnered significant community discussion, indicating awareness and potential for future exploitation.