Vault
Backend & InfraA tool for secrets management, encryption as a service, and privileged access management
Release History
v1.21.211 fixes6 featuresThis patch release focuses heavily on stability and bug fixes across core components, replication, and the secrets-sync enterprise feature, alongside dependency updates including Go 1.25.5 and UBI 10 base images.
v1.21.126 fixes14 featuresThis patch addresses several security vulnerabilities, fixes numerous bugs across authentication methods and the UI, and introduces significant enterprise features related to PKI certificate reporting and activity monitoring.
v1.21.0No release notes provided.
v1.21.0-rc1No release notes provided.
v1.20.4No release notes provided.
v1.20.3No release notes provided.
v1.20.22 fixesThis release addresses a critical security vulnerability in the LDAP auth method related to MFA enforcement bypass and includes several bug fixes for template rendering and identity MFA caching.
v1.20.1No release notes provided.
v1.20.0Breaking4 fixes5 featuresThis release focuses heavily on updating numerous authentication, database, and secret engine plugins to newer versions, alongside security hardening for rekey operations and critical configuration changes for integrated storage startup.
v1.20.0-rc2No release notes provided.
v1.20.0-rc1Breaking5 fixes10 featuresThis release introduces several new Enterprise features, including Auto Irrevocable Lease Removal and SCEP support for PKI, alongside security hardening for rekey cancellation and client IP validation. A critical configuration change requires explicitly setting `disable_mlock` when using integrated storage.
v1.19.51 fix1 featureVault Enterprise 1.19.5 is a Long-Term Support (LTS) release that includes an update to the Snowflake database plugin and general improvements and bug fixes.
v1.19.4Breaking2 fixes4 featuresThis release updates underlying dependencies, introduces FIPS 140-3 compliance and post-quantum key agreement support, and fixes critical bugs related to enterprise plugin operation on standby nodes.
v1.19.36 fixesThis patch release (1.19.3) focuses primarily on bug fixes across several components including core, database, identity, plugins, and the AWS secrets engine, alongside an update to the JWT authentication plugin.
v1.19.24 fixesThis patch release (1.19.2) focuses primarily on bug fixes across several secrets engines, including OpenLDAP, PKI, and Transit, and updates the internal Go version.
v1.19.1Breaking12 fixes1 featureVault Enterprise 1.19.1 is an LTS release focused on stability, including numerous bug fixes across various auth and secret engines, particularly addressing panics on performance standby nodes. It also updates several underlying plugins to newer versions.
v1.19.0Breaking4 fixes6 featuresVault 1.19.0 is an Enterprise LTS release introducing significant improvements to HA standby health reporting via sys/health and enforcing stricter security constraints in the PKI engine. This version also updates numerous plugins and standardizes IPv6 address formatting across configuration.
v1.18.5No release notes provided.
v1.19.0-rc1Breaking1 fix9 featuresThis release introduces Automated Root Rotation capabilities for several plugins (Enterprise only) and enhances HA status reporting via sys/health. It also tightens security by enforcing PKI issuer constraints and updating several bundled plugins.
v1.18.410 fixes3 featuresThis patch updates internal dependencies for consistency and addresses several bugs across activity export, core key rotation, database plugins, and UI login flows, particularly concerning MFA and LDAP navigation.