Vault v2.0.4 released on 04-08-2026
Vault v2.0.4 is out now. It includes breaking changes to UBI-based container images and a set of security hardenings across ACLs, identity and SCIM, so administrators and enterprise teams should plan upgrades and configuration reviews.
See the official release notes on the project’s GitHub release page for full details, upgrade guidance and the complete changelog.
What’s in this release
- UBI-based container images no longer include gnupg, openssl or procps — a breaking change that can affect image builds and runtime scripts.
- Security fixes such as normalising the policies parameter to lowercase to close an ACL privilege-escalation bypass involving allowed_parameters/denied_parameters constraints.
- Identity and SCIM improvements: RFC 7644 filtering for SCIM Users and Groups, a read-only groups field on SCIM User resources, and protections to prevent SCIM-managed entities from being moved across SCIM boundaries or deleted across namespaces.
Upgrade notes
- Review any automation, image build steps and runtime tooling that depend on gnupg, openssl or procps and update them before upgrading; test changes in a staging environment.
- If you need to roll back, verify policy-casing behaviour and identity-related endpoints in a safe environment to ensure compatibility with the previous release.
Share any issues or notes on your upgrade experience so other users can learn what worked and what caused friction.
