OpenBao

Security Notices
OpenBao Security Update Addresses 4 Vulnerabilities

OpenBao 2.6.0 addresses Agent log-secret exposure, policy-template privilege expansion, recovery-token timing leakage and a LIST deny-rule bypass. Update servers and Agents separately, restrict exposed logs and assess credential revocation where warranted.

Read this guide