CVE-2025-24365

Summary

CVE-2025-24365 affects the unofficial Bitwarden compatible server, vaultwarden. This vulnerability, which was formerly known as bitwarden_rs, enables an attacker to obtain owner rights of another organization. To exploit this issue, the attacker needs to know the ID of the victim organization and be the owner or admin of another organization. This vulnerability has been addressed in version 1.33.0 of vaultwarden.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.