●Change8

Migrating to Vault v2.0.2

Version v2.0.2 introduces 2 breaking changes. This guide details how to update your code.

Released: 6/5/2026

2
Breaking Changes
2
Migration Steps
3
Affected Symbols

⚠️ Check Your Code

If you use any of these symbols, you need to read this guide:

vault (container build)secrets/sshplugins

Breaking Changes

●Issue #1

The `cap_ipc_lock` capability is removed from `vault` at build time for containers. Vault in containers can no longer call `mlock()`. Operators must set `disable_mlock = true` in Vault's configuration and should disable swapping to ensure data safety.

●Issue #2

RSA key sizes are now limited to a maximum of 8192 bits due to CVE-2026-39829.

Migration Steps

  1. 1
    If running Vault in a container, set `disable_mlock = true` in Vault's configuration.
  2. 2
    If running Vault in a container, disable swapping to guarantee data safety.

Release Summary

This release removes the `cap_ipc_lock` capability for containerized Vault builds, enforces a maximum RSA key size, and fixes plugin signature verification and UI state bugs.

Need More Details?

View the full release notes and all changes for Vault v2.0.2.

View Full Changelog