ZoomEye finds 29,265 internet-reachable HashiCorp Vault instances

A ZoomEye fingerprint query for HashiCorp Vault returned 29,265 services reachable from the public internet, collected on 24 September 2026. Vault stores database passwords, API keys and cloud tokens, so an exposed API means exposed keys for everything the deployment is wired to.

• ZoomEye: 29,265 HashiCorp Vault instances reachable from the internet
• Vault holds database passwords, API keys, certificates and cloud tokens
• HashiCorp guidance says Vault should sit on a private network
• The app="etcd" query returned 0 — a zero count is not proof of absence