Change8

Vault

Backend & Infra

A tool for secrets management, encryption as a service, and privileged access management

Latest: v1.21.220 releases6 breaking changesView on GitHub →

Release History

v1.21.211 fixes6 features
Jan 7, 2026

This patch release focuses heavily on stability and bug fixes across core components, replication, and the secrets-sync enterprise feature, alongside dependency updates including Go 1.25.5 and UBI 10 base images.

v1.21.126 fixes14 features
Nov 19, 2025

This patch addresses several security vulnerabilities, fixes numerous bugs across authentication methods and the UI, and introduces significant enterprise features related to PKI certificate reporting and activity monitoring.

v1.21.0
Oct 22, 2025

No release notes provided.

v1.21.0-rc1
Oct 10, 2025

No release notes provided.

v1.20.4
Sep 24, 2025

No release notes provided.

v1.20.3
Aug 28, 2025

No release notes provided.

v1.20.22 fixes
Aug 6, 2025

This release addresses a critical security vulnerability in the LDAP auth method related to MFA enforcement bypass and includes several bug fixes for template rendering and identity MFA caching.

v1.20.1
Jul 24, 2025

No release notes provided.

v1.20.0Breaking4 fixes5 features
Jun 25, 2025

This release focuses heavily on updating numerous authentication, database, and secret engine plugins to newer versions, alongside security hardening for rekey operations and critical configuration changes for integrated storage startup.

v1.20.0-rc2
Jun 17, 2025

No release notes provided.

v1.20.0-rc1Breaking5 fixes10 features
Jun 12, 2025

This release introduces several new Enterprise features, including Auto Irrevocable Lease Removal and SCEP support for PKI, alongside security hardening for rekey cancellation and client IP validation. A critical configuration change requires explicitly setting `disable_mlock` when using integrated storage.

v1.19.51 fix1 feature
May 29, 2025

Vault Enterprise 1.19.5 is a Long-Term Support (LTS) release that includes an update to the Snowflake database plugin and general improvements and bug fixes.

v1.19.4Breaking2 fixes4 features
May 16, 2025

This release updates underlying dependencies, introduces FIPS 140-3 compliance and post-quantum key agreement support, and fixes critical bugs related to enterprise plugin operation on standby nodes.

v1.19.36 fixes
Apr 30, 2025

This patch release (1.19.3) focuses primarily on bug fixes across several components including core, database, identity, plugins, and the AWS secrets engine, alongside an update to the JWT authentication plugin.

v1.19.24 fixes
Apr 18, 2025

This patch release (1.19.2) focuses primarily on bug fixes across several secrets engines, including OpenLDAP, PKI, and Transit, and updates the internal Go version.

v1.19.1Breaking12 fixes1 feature
Apr 4, 2025

Vault Enterprise 1.19.1 is an LTS release focused on stability, including numerous bug fixes across various auth and secret engines, particularly addressing panics on performance standby nodes. It also updates several underlying plugins to newer versions.

v1.19.0Breaking4 fixes6 features
Mar 5, 2025

Vault 1.19.0 is an Enterprise LTS release introducing significant improvements to HA standby health reporting via sys/health and enforcing stricter security constraints in the PKI engine. This version also updates numerous plugins and standardizes IPv6 address formatting across configuration.

v1.18.5
Feb 24, 2025

No release notes provided.

v1.19.0-rc1Breaking1 fix9 features
Feb 20, 2025

This release introduces Automated Root Rotation capabilities for several plugins (Enterprise only) and enhances HA status reporting via sys/health. It also tightens security by enforcing PKI issuer constraints and updating several bundled plugins.

v1.18.410 fixes3 features
Jan 30, 2025

This patch updates internal dependencies for consistency and addresses several bugs across activity export, core key rotation, database plugins, and UI login flows, particularly concerning MFA and LDAP navigation.