- Remove the container IPC capability causing Vault to lose mlock() support; operators must set disable_mlock=true and disable swapping for safety.
- Limit SSH secret RSA keys to a maximum of 8192 bits to remediate CVE‑2026‑39829.
- Fix plugin signature verification with expired PGP keys, correct Transit UI key‑version dropdown selection, update Azure enterprise plugin, and bump Go to 1.26.4.
v2.0.2
Official HashiCorp Vault changelog summary with source attribution, release tags, and community reactions.
Track this HashiCorp Vault release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.
Verify the original release note
Every summary should remain traceable to the original changelog or release source.
Follow this in context
Turn this HashiCorp Vault release note into a weekly digest for the tools you actually use.
Create digestMore HashiCorp Vault changelog updates
Added beta AI Agent Support with an Agent Registry and OAuth 2.0 JWT authorization for Vault requests.