Identity CVE · Secrets managers
CVE-2025-49830CyberArk Conjur path traversal and file disclosure
high · CVSS 7.1
What broke
Conjur failed to normalize a path and would read files outside the intended directory. CVSS 7.1. In the Cyata chain it is how you turn an authenticator bypass into host secrets and configuration. Fixed with the rest of the set in 1.22.1 / 13.6.1.
Why it matters
File disclosure on a secrets manager is rarely "just a file." It is the policy file, the authenticator config, and sometimes the very credentials the manager uses to talk to the cloud.
What to do
- Upgrade. Do not try to mitigate with a reverse-proxy rewrite.
- After the patch, check that Conjur's working directory does not contain leftover dumps or world-readable policy checkouts.
Sources
Related identity CVEs
Know a primary source we should add, or a patch status that has changed? Email [email protected]. See all briefs in the identity CVE catalog, or volunteer as a CVE Analyst.
Compiled from vendor advisories, NVD, CISA KEV, and public research. CVSS figures can disagree across NVD and the CNA. Confirm affected versions against the vendor advisory before you patch. Independent, community-driven analysis. See the disclaimer.