## https://sploitus.com/exploit?id=FED5EEA3-3D08-54B1-99A8-EF713F4D9223
# CVE-2025-6000 — HashiCorp Vault Privileged Code Execution (PoC)
Proof-of-concept for **CVE-2025-6000**, a privilege-escalation-to-RCE flaw in
HashiCorp Vault's audit backends. The audit device lets a privileged caller
control the `prefix`, `file_path`, and `mode` options with no validation. By
writing an executable payload into Vault's `plugin_directory`, then registering
and mounting it as a plugin, an attacker with a root token can run arbitrary
code on the Vault host.
## Demo
https://github.com/user-attachments/assets/f8d6c90a-b511-4e96-8e4d-718c7a765601
## Affected
- Vault **0.8.0 up to and including 1.20.0** with `plugin_directory` configured.
- Requires a **root token or equivalent** (`sys/audit`, `sys/plugins`,
`sys/mounts`).
## Usage
```bash
python3 CVE-2025-6000.py --token \
--socket-addr \
--listen-port 9861 \
--callback-host --callback-port 8000 \
--cleanup
```
- `--socket-addr` — address Vault dials for the audit stream (your VPN IP:port
or an ngrok TCP endpoint).
- `--listen-port` — local port the capture server binds.
- `--callback-host` / `--callback-port` — HTTP endpoint used to confirm
execution.
- `--cleanup` — remove the audit devices, plugin, and mount at the end.
If capture fails, the script falls back to a manual SHA256 prompt. Run `-h` for
all options.
## Disclaimer
For **authorized security testing, research, and education only**. Use only
against systems you own or have explicit written permission to test. You are
solely responsible for your use of this software; the authors accept no
liability for misuse or damage. Unauthorized access to computer systems is
illegal.
## License
MIT — see [`LICENSE`](LICENSE).