Description
Detects a publicly accessible HashiCorp Vault API instance that is unsealed and responding without authentication. This critical misconfiguration can expose sensitive secrets and enable privilege escalation or lateral movement.
vault-unsealed-unauth: HashiCorp Vault API - Exposure
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/projectdiscovery/nuclei-templates/blob/main/http/exposures/vault-unsealed-unauth.yaml
https://projectdiscovery.io/blog/hacktober-2025-nuclei-templates
https://newreleases.io/project/github/projectdiscovery/nuclei-templates/release/v10.3.0
https://cve.imfht.com/poc_detail/59ca21806a89d9688626abeadf6dc7a13ed840df
https://developer.hashicorp.com/vault/api-docs/system/unseal