BlackTreeLifecycle intelligence
Evidence-linked product lifecycle intelligenceSUPPORT · SECURITY · RETIREMENT
← Lifecycle catalogue
RELEASE NOTESHASHICORPVERIFIED

PUBLISHER UPDATE · VAULT-2.0.2

VAULT-2.0.2 release notes and known issues

v2.0.2

Scope: HashiCorp Vault. This update record adds version, fix and known-issue context. Its publication date is not a lifecycle boundary.

Summary

BREAKING CHANGES: containers: Remove cap_ipc_lock capability on vault at build time to allow running Vault in common container runtimes. Vault in containers will no longer be able to call mlock() to lock memory. Operators should set disable_mlock = true in Vault's configuration. Runtime operators are advised to disable swapping to guarantee data safety. secrets/ssh: RSA key sizes are now limited to a maximum size of 8192 bits addressing CVE-2026-39829 CHANGES: core: Bump Go version to 1.26.4 secrets/azure (enterprise): Update plugin to v0.26.4+ent BUG FIXES: plugins: Fix plugin signature verification failure with expired pgp key when registering a plugin. ui/transit: Fix key version dropdown selected state when editing a transit key.

Improvements and security content

  • BREAKING CHANGES: containers: Remove cap_ipc_lock capability on vault at build time to allow running Vault in common container runtimes. Vault in containers will no longer be able to call mlock() to lock memory. Operators should set disable_mlock = true in Vault's configuration. Runtime operators are advised to disable swapping to guarantee data safety. secrets/ssh: RSA key sizes are now limited to a maximum size of 8192 bits addressing CVE-2026-39829 CHANGES: core: Bump Go version to 1.26.4 secrets/azure (enterprise): Update plugin to v0.26.4+ent BUG FIXES: plugins: Fix plugin signature verification failure with expired pgp key when registering a plugin. ui/transit: Fix key version dropdown selected state when editing a transit key.

Known issues

Publisher statement

Not stated. The verified publisher record does not contain a known-issues statement.

Affected products and versions

Products

  • HashiCorp Vault

Affected versions

  • 2.0.2
  • 1.26.4
  • 0.26.4+ent

Fixed versions or updates

  • No fixed version is stated in this record.

Recommended action

Review the official publisher document before deployment.

Related vulnerabilities

BlackTree CVE Intelligence
CVE-2026-39829Open CVE report →

Official publisher evidence