platform
OpenBao: security advisories, deprecations and releases
Open-source secrets management server, a Linux Foundation fork of HashiCorp Vault.
- Items, 90 days
- 6
- Critical
- 0
- Last critical
- none
- This week
- 1
What your digest would have held this week
1 item from the last 7 days. Zero sends only the ones that touch your stack.
Security 2
- HIGH NEW THIS WEEK ACT BY 1 NOV 2026 OpenSSF Blog · 30 Oct 2026
OpenBao v2.7.2 fixes multiple security vulnerabilities
OpenBao 2.7.2 patches authentication and secret engine vulnerabilities and improves PKI, cluster reload, and rate-limit behavior.
- HIGH OpenSSF Blog · 3 Oct 2026
OpenBao v2.6.2 includes security fixes
OpenBao v2.6.2 stable release contains security fixes; users should upgrade promptly.
Deprecations 1
- HIGH ACT BY 1 OCT 2026 endoflife.date · 2 Oct 2026
OpenBao 2.6 has reached end of life
OpenBao 2.6 reached end of life on 2026-10-01, as listed by endoflife.date.
Releases 3
- INFO OpenSSF Blog · 6 Oct 2026
OpenBao v2.6 released
OpenBao 2.6 adds per-namespace sealing and a new workflow engine for cross-plugin communication.
- MEDIUM OpenSSF Blog · 3 Oct 2026
OpenBao v2.7.0 beta adds post-quantum and external KMS support
OpenBao v2.7.0 beta introduces external KMS-backed keys, post-quantum cryptography, and PostgreSQL read scalability.
- INFO endoflife.date · 2 Oct 2026
OpenBao 2.7 released
OpenBao 2.7 was released on 2026-09-23.
Only hear about OpenBao when it touches your stack
Tell Zero what you run. You get one email, and only on the days something above applies to you.