●Change8

Migrating to Vault v2.0.3

Version v2.0.3 introduces 1 breaking change. This guide details how to update your code.

Released: 6/17/2026

1
Breaking Changes
1
Migration Steps
18
Affected Symbols

⚠️ Check Your Code

If you use any of these symbols, you need to read this guide:

auth/radiuscore/aclsecrets/spiffetransformauth/cfcoresecrets/azuresys/billing/configsealwrapidentity/scimsdk/helper/keysutilcore/rotationMgrkmipsecret-syncsecrets/database/mssqlsecrets/pkisecrets/transitstorage/raft

Breaking Changes

●Issue #1

LIST ACL requests with a trailing slash now correctly respect more-specific deny policies. Policies relying on the previous (incorrect) behavior where a deny on `path "kv/*" { deny }` could be bypassed for `LIST kv/private/` if a broader allow `path "kv/*"` also existed may now be denied.

Migration Steps

  1. 1
    Review ACL policies if they rely on the previous behavior where LIST requests with a trailing slash could bypass specific deny rules.

Release Summary

This release introduces beta support for AI Agents and enhances security and ACL enforcement, particularly around LIST operations with trailing slashes. It also includes various bug fixes and enterprise improvements across authentication, secrets engines, and storage.

Need More Details?

View the full release notes and all changes for Vault v2.0.3.

View Full Changelog