Vault Unlocked: High-Severity Flaws in Vaultwarden Expose Encrypted Secrets and Allow Privilege Escalation

**Executive summary:** Security researchers disclosed three critical CVEs in Vaultwarden 1.35.3: two flaws allow Manager-role permission bypass and bulk privilege escalation across collections, and a Partial Update endpoint leaks other users' encrypted vault entries and attachment download URLs; administrators should upgrade to Vaultwarden 1.35.4 immediately.