#473 Race Condition: Vault cache read-modify-write without lock

closed high Created 2025-12-17 01:42 · Updated 2025-12-17 01:45

Description

Edit
engine/config.py:227-285 Vault cache operations not protected by lock: 1. Cache read at line 227-245 (outside lock) 2. Cache write at line 282-284 (outside lock) Race: Thread A reads stale cached secret while Thread B updates cache. Impact: Security issue - stale credentials returned. FIX: Protect all _vault_cache operations with threading.Lock.

Comments

Loading comments...

Context

Loading context...

Audit History

View All
Loading audit history...