OpenBao
OpenBao Security Update Addresses 4 Vulnerabilities
09/22/2026
OpenBao 2.6.0 addresses Agent log-secret exposure, policy-template privilege expansion, recovery-token timing leakage and a LIST deny-rule bypass. Update servers and Agents separately, restrict exposed logs and assess credential revocation where warranted.
