Vaultwarden 1.35.0 → 1.37.4

Vulnerabilities fixed by this upgrade

• 5.3 GHSA-rxhg-2pw9-vf25 Send max_access_count can be exceeded by concurrent access requests
• 4.3 GHSA-455c-vgg9-jxw8 Failed cipher share leaves a cross-organization collection link that grants access to the cipher
• 5.8 GHSA-hw4g-2v3f-74x5 Icon endpoint SSRF fix bypass via second-stage favicon IP literal URLs
• 4.3 GHSA-rqf8-2568-r7mc Manager-with-no-collections can enumerate org user/group → collection mappings (incomplete fix of GHSA-jjxg-p3v6-52ww)
• 5.5 GHSA-88qc-6ch9-mc3j Directory-connector member import (ldap_import) skips org-policy enforcement (check_user_allowed), bypassing the Single-Organization and required-2FA policies
• 5.9 GHSA-xwf8-pjh7-h589 Cross-organization full cipher access via unguarded full-access-group query
• 4.0 GHSA-vh5m-fc9v-m84g SSRF filter bypass (regex not applied post-resolution)
• 5.3 GHSA-96f7-78q5-j345 Unauthenticated WebSocket connection flooding on /notifications/anonymous-hub (resource-exhaustion DoS)
• 8.3 CVE-2026-47158 CSRF in SSO Authorization Flow
• medium CVE-2026-47159 Authentication Flow Information Disclosure in SSO Discovery Allows Organization Enumeration and Pre-Validation Token Exposure
• 7.7 CVE-2026-47164 SSO Email Auto-Link Can Bind an Existing Local Account to an Attacker-Controlled IdP Identity
• 5.8 CVE-2026-47160 Server-side request forgery (SSRF) via Icon Endpoint Decimal/Hex/Octal IP Bypass
• 7.3 CVE-2026-43914 Brute-force protection bypass vulnerability
• 8.1 CVE-2026-43913 Unconfirmed Owner Can Purge Entire Organization Vault
• 8.7 CVE-2026-43912 Cross-Org Group Binding Enables Unauthorized Read And Write Access Into Another Organization
• 6.8 CVE-2026-43911 Refresh tokens not invalidated on security stamp rotation
• 4.3 CVE-2026-31835 Vaultwarden: WebAuthn assertion processed before signature verification allows persistent credential backup-flag tampering
• 6.5 CVE-2026-26012 Full Cipher Enumeration Ignoring Organization Collection Permissions

Breaking changes

• breaking Reverse proxies: with IP_HEADER=X-Forwarded-For, the client IP is now the rightmost address that isn't in IP_HEADER_TRUSTED_PROXIES (it used to be the leftmost). If you have several proxies in a row, for example a CDN in front of nginx, add all of them to IP_HEADER_TRUSTED_PROXIES. Otherwise the… in 1.37.4
• breaking Sends: bw send receive on CLI 2026.4.2 and older no longer works, the same as against Bitwarden's own servers since v2026.8.0. Creating and managing Sends works on all clients. in 1.37.4
• breaking Feature flags: these flags were removed because no client reads them anymore: ssh-agent, ssh-key-vault-item, mutual-tls, anon-addy-self-host-alias, simple-login-self-host-alias, pm-25373-windows-biometrics-v2, pm-26340-linux-biometrics-v2, desktop-ui-migration-milestone-1 to -4, cxp-import-mobile… in 1.37.4
• breaking Duo: DUO_USE_IFRAME (the deprecated Traditional Prompt) is removed and ignored if set. in 1.37.4
• breaking Custom templates: there's a new email template, email/recover_twofactor, sent after a login with a two-step recovery code. in 1.37.4
• breaking The legacy POST /identity/accounts/register and POST /api/accounts/prelogin endpoints are removed. No current client uses them. in 1.37.4
• breaking Sends cleanup: remove legacy endpoints and align with upstream in 1.37.4
• breaking Remove legacy API endpoints and compatibility code in 1.37.4
• breaking Remove old compatibility code in 1.37.0
• breaking Remove unused fields in 1.37.0

Security changes

• security Organization member revocation [[GHSA-69q9-v8p6-xvx3]](https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-69q9-v8p6-xvx3) (High, 8.1) in 1.37.4
• security Two-factor authentication [[GHSA-7jg8-8m5x-6j9r]](https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-7jg8-8m5x-6j9r) (Medium, 6.8) in 1.37.4
• security Organization invitations [[GHSA-v576-3wvq-xh3c]](https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-v576-3wvq-xh3c) (Medium, 6.8) in 1.37.4
• security Attachments [[GHSA-q5x6-grh5-fqgc]](https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-q5x6-grh5-fqgc) (Medium, 6.5) in 1.37.4
• security Organization event logs [[GHSA-64mc-4p6f-r7x9]](https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-64mc-4p6f-r7x9) (Medium, 4.3) in 1.37.4
• security Cipher sharing [[GHSA-7ccc-c43j-4p36]](https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-7ccc-c43j-4p36) (Medium, 4.3) in 1.37.4
• security Organization API key [[GHSA-qwx4-wcv4-mpcv]](https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-qwx4-wcv4-mpcv) (Low, 3.8) in 1.37.4
• security Additional dependency updates and minor security enhancements in 1.37.4
• security fix(security): revoke 2FA remember tokens when credentials or 2FA change in 1.37.3
• security fix(security): rate limit prelogin and auth request endpoints in 1.37.3
• security Fixes GHSA-wc45-m6pv-rrf9: Send access limits not enforced on the new Send access endpoints in 1.37.0
• security SSRF via the icon endpoint [[GHSA-hw4g-2v3f-74x5]](https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-hw4g-2v3f-74x5) [[GHSA-vh5m-fc9v-m84g]](https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-vh5m-fc9v-m84g) (Medium, 5.8 / 6.3) in 1.37.0
• security Cross-Organization Cipher Access [[GHSA-xwf8-pjh7-h589]](https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-xwf8-pjh7-h589) (Medium, 5.9) in 1.37.0
• security Organization Policy Bypass on Directory Import [[GHSA-88qc-6ch9-mc3j]](https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-88qc-6ch9-mc3j) (Medium, 5.5) in 1.37.0
• security Send Access-Count Bypass [[GHSA-rxhg-2pw9-vf25]](https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-rxhg-2pw9-vf25) (Medium, 5.3) in 1.37.0
• security Unauthenticated WebSocket Flooding DDOS [[GHSA-96f7-78q5-j345]](https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-96f7-78q5-j345) (Medium, 5.3) in 1.37.0
• security Cross-Organization Secret Sharing [[GHSA-455c-vgg9-jxw8]](https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-455c-vgg9-jxw8) (Medium, 4.3) in 1.37.0
• security Organization Import Authorization [[GHSA-f3qw-qg77-hmm4]](https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-f3qw-qg77-hmm4)[[GHSA-jq2g-h4xr-4mcr]](https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-jq2g-h4xr-4mcr) (Medium, 4.3) in 1.37.0
• security Organization Data Enumeration via the Manager role [[GHSA-rqf8-2568-r7mc]](https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-rqf8-2568-r7mc) (Medium, 4.3) in 1.37.0
• security SSO Login CSRF GHSA-pfp2-jhgq-6hg5 GHSA-w6h6-8r66-hcv7 in 1.36.0
• security User/Organization Enumeration GHSA-hxqh-ff5p-wfr3 in 1.36.0
• security SSO existing-user binding GHSA-j4j8-gpvj-7fqr GHSA-6x5c-84vm-5j56 in 1.36.0
• security SSRF via Icon Endpoint GHSA-72vh-x5jq-m82g in 1.36.0
• security Some crate's updated and other minor security enhancements in 1.36.0
• security Fixes CVE-2026-47158: CSRF in SSO Authorization Flow in 1.35.8
• security Fixes CVE-2026-47160: Server-side request forgery (SSRF) via Icon Endpoint Decimal/Hex/Octal IP Bypass in 1.35.8
• security Fixes CVE-2026-47159: Authentication Flow Information Disclosure in SSO Discovery Allows Organization Enumeration and Pre-Validation Token Exposure in 1.35.8
• security GHSA-937x-3j8m-7w7p Unconfirmed Owner Can Purge Entire Organization Vault. in 1.35.5
• security GHSA-569v-845w-g82p Cross-Org Group Binding Enables Unauthorized Read And Write Access Into Another Organization in 1.35.5
• security GHSA-6j4w-g4jh-xjfx Refresh tokens not invalidated on security stamp rotation in 1.35.5
• security Fixes CVE-2026-43914: Brute-force protection bypass vulnerability in 1.35.4
• security GHSA-w9f8-m526-h7fh. This vulnerability would allow an attacker to access a cipher from a different user (fully encrypted) if they already know its internal UUID. in 1.35.4
• security GHSA-h4hq-rgvh-wh27. This vulnerability allows an attacker with manager-level access within an organization to modify collections they can access, even if they do not have management permissions for them. in 1.35.4
• security GHSA-r32r-j5jq-3w4m. This vulnerability allows an attacker with manager-level access within an organization to modify collections they are not assigned. in 1.35.4
• security GHSA-h265-g7rm-h337 (Publication in process, waiting for CVE assignment) This vulnerability would allow an authenticated attacker that is part of an organization to access items from collections to which the attacker does not belong. in 1.35.3

Every release in between