An authorization bypass vulnerability in the Vault secrets back-end implementation of Juju versions 3.1.6 through 3.6.18 allows an authenticated unit agent to p…

An authorization bypass vulnerability affects Juju versions 3.1.6 through 3.6.18 in the Vault secrets back-end implementation. The vulnerability allows authenticated unit agents to perform unauthorized updates to secret revisions. Attackers with sufficient information can poison existing secret revisions within the Vault secret back-end scope. This represents a significant security risk for organizations using affected Juju versions with Vault integration. The vulnerability impacts secret management functionality and could lead to compromise of sensitive data.