Vaultwarden 1.34.2 → 1.37.5

Vulnerabilities fixed by this upgrade

• 4.3 GHSA-9pjj-f9g5-3x4c Emergency access
• 5.3 GHSA-x9cq-f669-vrr4 Website icons
• 4.3 GHSA-7ccc-c43j-4p36 Organization member can move personal items into an organization without collection access
• 8.1 GHSA-69q9-v8p6-xvx3 Revoked or unconfirmed organization member retains read and delete access to organization ciphers
• 6.5 GHSA-q5x6-grh5-fqgc Unbounded client-declared attachment fileSize causes an out-of-bounds panic that permanently breaks vault sync for every user who can see the cipher
• 6.8 GHSA-v576-3wvq-xh3c Loop-carried user_created flag in send_invite deletes a pre-existing user's account and entire vault when an invite e-mail fails
• 4.3 GHSA-64mc-4p6f-r7x9 Revoked or unconfirmed organization Admin can read cipher audit logs
• 3.8 GHSA-qwx4-wcv4-mpcv Organization Admin can revoke and delete Owners through an Admin-mintable organization API key
• 6.8 GHSA-7jg8-8m5x-6j9r vaultwarden: device-level 2FA "remember" tokens survive admin-initiated 2FA removal, allowing 2FA bypass for up to 30 days (residual gap in fix f1ff613)
• 5.3 GHSA-rxhg-2pw9-vf25 Send max_access_count can be exceeded by concurrent access requests
• 4.3 GHSA-455c-vgg9-jxw8 Failed cipher share leaves a cross-organization collection link that grants access to the cipher
• 5.8 CVE-2026-116678 Icon endpoint SSRF fix bypass via second-stage favicon IP literal URLs
• 4.3 GHSA-rqf8-2568-r7mc Manager-with-no-collections can enumerate org user/group → collection mappings (incomplete fix of GHSA-jjxg-p3v6-52ww)
• 5.5 GHSA-88qc-6ch9-mc3j Directory-connector member import (ldap_import) skips org-policy enforcement (check_user_allowed), bypassing the Single-Organization and required-2FA policies
• 5.9 GHSA-xwf8-pjh7-h589 Cross-organization full cipher access via unguarded full-access-group query
• 4.0 GHSA-vh5m-fc9v-m84g SSRF filter bypass (regex not applied post-resolution)
• 5.3 GHSA-96f7-78q5-j345 Unauthenticated WebSocket connection flooding on /notifications/anonymous-hub (resource-exhaustion DoS)
• 8.3 CVE-2026-47158 CSRF in SSO Authorization Flow
• medium CVE-2026-47159 Authentication Flow Information Disclosure in SSO Discovery Allows Organization Enumeration and Pre-Validation Token Exposure
• 7.7 CVE-2026-47164 SSO Email Auto-Link Can Bind an Existing Local Account to an Attacker-Controlled IdP Identity
• 5.8 CVE-2026-47160 Server-side request forgery (SSRF) via Icon Endpoint Decimal/Hex/Octal IP Bypass
• 7.3 CVE-2026-43914 Brute-force protection bypass vulnerability
• 8.1 CVE-2026-43913 Unconfirmed Owner Can Purge Entire Organization Vault
• 8.7 CVE-2026-43912 Cross-Org Group Binding Enables Unauthorized Read And Write Access Into Another Organization
• 6.8 CVE-2026-43911 Refresh tokens not invalidated on security stamp rotation
• 4.3 CVE-2026-31835 Vaultwarden: WebAuthn assertion processed before signature verification allows persistent credential backup-flag tampering
• 6.5 CVE-2026-26012 Full Cipher Enumeration Ignoring Organization Collection Permissions

Breaking changes

• breaking Web vault: the bundled web vault is now v2026.10.1. If you serve your own web vault older than v2026.7.1, you might have compatibility issues. in 1.37.5
• breaking Configuration: invalid values now stop startup with an error. Numeric options have tighter types, so negative or too large values are rejected, for example above 65535 for LOGIN_RATELIMIT_MAX_BURST, TRASH_AUTO_DELETE_DAYS, EVENTS_DAYS_RETAIN or SMTP_TIMEOUT, or above 255 for EMAIL_ATTEMPTS_LIMIT.… in 1.37.5
• breaking Remove expired cookies from the icon cookie jar in 1.37.5
• breaking Reverse proxies: with IP_HEADER=X-Forwarded-For, the client IP is now the rightmost address that isn't in IP_HEADER_TRUSTED_PROXIES (it used to be the leftmost). If you have several proxies in a row, for example a CDN in front of nginx, add all of them to IP_HEADER_TRUSTED_PROXIES. Otherwise the… in 1.37.4
• breaking Sends: bw send receive on CLI 2026.4.2 and older no longer works, the same as against Bitwarden's own servers since v2026.8.0. Creating and managing Sends works on all clients. in 1.37.4
• breaking Feature flags: these flags were removed because no client reads them anymore: ssh-agent, ssh-key-vault-item, mutual-tls, anon-addy-self-host-alias, simple-login-self-host-alias, pm-25373-windows-biometrics-v2, pm-26340-linux-biometrics-v2, desktop-ui-migration-milestone-1 to -4, cxp-import-mobile… in 1.37.4
• breaking Duo: DUO_USE_IFRAME (the deprecated Traditional Prompt) is removed and ignored if set. in 1.37.4
• breaking Custom templates: there's a new email template, email/recover_twofactor, sent after a login with a two-step recovery code. in 1.37.4
• breaking The legacy POST /identity/accounts/register and POST /api/accounts/prelogin endpoints are removed. No current client uses them. in 1.37.4
• breaking When using a MariaDB or MySQL server which does not support native TLS/SSL encrypted connections, using the Alpine image of Vaultwarden might fail to connect. Add MARIADB_TLS_DISABLE_PEER_VERIFICATION=1 as an environment variable to your Vaultwarden server environment, and it will start running… in 1.37.4
• breaking Sends cleanup: remove legacy endpoints and align with upstream in 1.37.4
• breaking Remove legacy API endpoints and compatibility code in 1.37.4
• breaking Remove old compatibility code in 1.37.0
• breaking Remove unused fields in 1.37.0
• breaking remove invalid emergency access dummy value in 1.35.0
• breaking Remove unnecessary output sharing between jobs in 1.35.0

Security changes

• security Website icons GHSA-x9cq-f669-vrr4 (Medium, 5.3) in 1.37.5
• security Emergency access GHSA-9pjj-f9g5-3x4c (Medium, 4.3) in 1.37.5
• security Organization member revocation GHSA-69q9-v8p6-xvx3 (High, 8.1) in 1.37.4
• security Two-factor authentication GHSA-7jg8-8m5x-6j9r (Medium, 6.8) in 1.37.4
• security Organization invitations GHSA-v576-3wvq-xh3c (Medium, 6.8) in 1.37.4
• security Attachments GHSA-q5x6-grh5-fqgc (Medium, 6.5) in 1.37.4
• security Organization event logs GHSA-64mc-4p6f-r7x9 (Medium, 4.3) in 1.37.4
• security Cipher sharing GHSA-7ccc-c43j-4p36 (Medium, 4.3) in 1.37.4
• security Organization API key GHSA-qwx4-wcv4-mpcv (Low, 3.8) in 1.37.4
• security Additional dependency updates and minor security enhancements in 1.37.4
• security fix(security): revoke 2FA remember tokens when credentials or 2FA change in 1.37.3
• security fix(security): rate limit prelogin and auth request endpoints in 1.37.3
• security Fixes GHSA-wc45-m6pv-rrf9: Send access limits not enforced on the new Send access endpoints in 1.37.0
• security SSRF via the icon endpoint GHSA-hw4g-2v3f-74x5 GHSA-vh5m-fc9v-m84g (Medium, 5.8 / 6.3) in 1.37.0
• security Cross-Organization Cipher Access GHSA-xwf8-pjh7-h589 (Medium, 5.9) in 1.37.0
• security Organization Policy Bypass on Directory Import GHSA-88qc-6ch9-mc3j (Medium, 5.5) in 1.37.0
• security Send Access-Count Bypass GHSA-rxhg-2pw9-vf25 (Medium, 5.3) in 1.37.0
• security Unauthenticated WebSocket Flooding DDOS GHSA-96f7-78q5-j345 (Medium, 5.3) in 1.37.0
• security Cross-Organization Secret Sharing GHSA-455c-vgg9-jxw8 (Medium, 4.3) in 1.37.0
• security Organization Import Authorization GHSA-f3qw-qg77-hmm4GHSA-jq2g-h4xr-4mcr (Medium, 4.3) in 1.37.0
• security Organization Data Enumeration via the Manager role GHSA-rqf8-2568-r7mc (Medium, 4.3) in 1.37.0
• security SSO Login CSRF GHSA-pfp2-jhgq-6hg5 GHSA-w6h6-8r66-hcv7 in 1.36.0
• security User/Organization Enumeration GHSA-hxqh-ff5p-wfr3 in 1.36.0
• security SSO existing-user binding GHSA-j4j8-gpvj-7fqr GHSA-6x5c-84vm-5j56 in 1.36.0
• security SSRF via Icon Endpoint GHSA-72vh-x5jq-m82g in 1.36.0
• security Some crate's updated and other minor security enhancements in 1.36.0
• security Fixes CVE-2026-47158: CSRF in SSO Authorization Flow in 1.35.8
• security Fixes CVE-2026-47160: Server-side request forgery (SSRF) via Icon Endpoint Decimal/Hex/Octal IP Bypass in 1.35.8
• security Fixes CVE-2026-47159: Authentication Flow Information Disclosure in SSO Discovery Allows Organization Enumeration and Pre-Validation Token Exposure in 1.35.8
• security GHSA-937x-3j8m-7w7p Unconfirmed Owner Can Purge Entire Organization Vault. in 1.35.5
• security GHSA-569v-845w-g82p Cross-Org Group Binding Enables Unauthorized Read And Write Access Into Another Organization in 1.35.5
• security GHSA-6j4w-g4jh-xjfx Refresh tokens not invalidated on security stamp rotation in 1.35.5
• security Fixes CVE-2026-43914: Brute-force protection bypass vulnerability in 1.35.4
• security GHSA-w9f8-m526-h7fh. This vulnerability would allow an attacker to access a cipher from a different user (fully encrypted) if they already know its internal UUID. in 1.35.4
• security GHSA-h4hq-rgvh-wh27. This vulnerability allows an attacker with manager-level access within an organization to modify collections they can access, even if they do not have management permissions for them. in 1.35.4
• security GHSA-r32r-j5jq-3w4m. This vulnerability allows an attacker with manager-level access within an organization to modify collections they are not assigned. in 1.35.4
• security GHSA-h265-g7rm-h337 (Publication in process, waiting for CVE assignment) This vulnerability would allow an authenticated attacker that is part of an organization to access items from collections to which the attacker does not belong. in 1.35.3

Every release in between