PatchTheCVEconjur vulnerabilities and fixes
Recent CVEs affecting conjur, with upgrade or downgrade steps. 5 tracked.
conjur has 5 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 5. Most recent: 2025-07-15. Highest priority: CVE-2025-49831 (score 61/100).
- CVE-2025-49831 CRITICAL 9.8 UPGRADE An attacker of Secrets Manager, Self-Hosted installations that route traffic from Secrets Manager to AWS throu
- CVE-2025-49830 MEDIUM 6.5 UPGRADE Conjur provides secrets management and application identity for infrastructure
- CVE-2025-49829 MEDIUM 6.5 UPGRADE Conjur provides secrets management and application identity for infrastructure
- CVE-2025-49828 HIGH 8.8 UPGRADE Conjur provides secrets management and application identity for infrastructure
- CVE-2025-49827 CRITICAL 9.8 UPGRADE Conjur provides secrets management and application identity for infrastructure
FAQ
How do I fix conjur vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is conjur being exploited right now?
None of the tracked conjur CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which conjur CVE should I patch first?
CVE-2025-49831 currently ranks highest (61/100): An attacker of Secrets Manager, Self-Hosted installations that route traffic from Secrets Manager to AWS throu.