CVE-2025-64761

CVE-2025-64761 is a high-severity privilege escalation vulnerability affecting OpenBao versions prior to 2.4.4. A privileged operator could exploit this by adding a root policy to an identity group, thereby escalating their or another user's permissions within the system. The vulnerability has a CVSS score of 7.2 (High), indicating that it can be exploited over the network with low attack complexity, leading to high impacts on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.