HashiCorp Vault version lifecycle
tool · HashiCorp
Current status
Supported version lines, end-of-life status, and latest releases for HashiCorp Vault — derived from official vendor sources, not third-party EOL aggregators.
Vault is a secrets management and data protection platform for credentials, certificates, and encryption keys.
Security: 12 tracked advisories. Details below — lifecycle and vulnerability status are separate.
Official site →Version lines
19
Supported
19
EOL lines
0
Latest stable
2.1.0
2026-09-01
Releases tracked
155
At a glance
Latest release
2.1.0
Line 2.1
Recommended support line
2.1
standard support
Status
STANDARD SUPPORT
Newest supported: 2.1
EOL
Not published
Exact date not officially published
Recommended line: 2.1 (newest supported line with lowest lifecycle risk — not blindly “latest”).
Supported versions
19 currently supported release lines.
| Version line | Lifecycle | Latest release | Released | EOL | Risk |
|---|---|---|---|---|---|
| 2.1 | standard supportlow | 2.1.0 | 2026-09-01 | Not officially published | low |
| 2.0 | standard supportlow | 2.0.4 | 2026-08-04 | Not officially published | low |
| 1.21 | standard supportlow | 1.21.4 | 2026-03-05 | Not officially published | low |
| 1.20 | standard supportlow | 1.20.4 | 2025-09-24 | Not officially published | low |
| 1.19 | standard supportlow | 1.19.5 | 2025-05-29 | Not officially published | low |
| 1.18 | standard supportlow | 1.18.5 | 2025-02-24 | Not officially published | low |
| 1.17 | standard supportlow | 1.17.6 | 2024-09-25 | Not officially published | low |
| 1.16 | standard supportlow | 1.16.3 | 2024-05-29 | Not officially published | low |
| 1.15 | standard supportlow | 1.15.6 | 2024-02-29 | Not officially published | low |
| 1.14 | standard supportlow | 1.14.10 | 2024-02-29 | Not officially published | low |
| 1.13 | standard supportlow | 1.13.13 | 2024-01-30 | Not officially published | low |
| 1.12 | standard supportlow | 1.12.11 | 2023-09-12 | Not officially published | low |
| 1.11 | standard supportlow | 1.11.12 | 2023-06-20 | Not officially published | low |
| 1.10 | standard supportlow | 1.10.11 | 2023-03-01 | Not officially published | low |
| 1.9 | standard supportlow | 1.9.10 | 2022-09-29 | Not officially published | low |
| 1.8 | standard supportlow | 1.8.12 | 2022-06-09 | Not officially published | low |
| 1.7 | standard supportlow | 1.7.10 | 2022-03-03 | Not officially published | low |
| 1.6 | standard supportlow | 1.6.7 | 2021-09-29 | Not officially published | low |
| 1.5 | standard supportlow | 1.5.9 | 2021-05-21 | Not officially published | low |
Lifecycle overview
Support windows from official lifecycle periods. Empty segments mean no dated period for that phase.
- 2.1standard supportstandard support
- 2.0standard supportstandard support
- 1.21standard supportstandard support
- 1.20standard supportstandard support
- 1.19standard supportstandard support
- 1.18standard supportstandard support
- 1.17standard supportstandard support
- 1.16standard supportstandard support
- 1.15standard supportstandard support
- 1.14standard supportstandard support
- 1.13standard supportstandard support
- 1.12standard supportstandard support
- 1.11standard supportstandard support
- 1.10standard supportstandard support
- 1.9standard supportstandard support
- 1.8standard supportstandard support
Showing 16 of 19 lines with lifecycle periods. See the directory below for the full list.
Known vulnerabilities
Recent OSV.dev advisories mapped to this product. CVSS/CWE from NVD and known-exploited status from CISA KEV when available. CompatHub is not the original vulnerability authority.
- Known vulnerabilities
- 12
- Known exploited
- 0
- Highest CVSS
- —
- CVE-2026-5006
Vault Vulnerable to Privilege Escalation via Slash Injection in Templated Policy Paths
- Affected:
- >=0.11.0,<2.0.4
- Fixed in:
- 2.0.4
- Source:
- OSV source · Advisory
- CVE-2026-12624
Vault vulnerable to LIST authorization bypass via trailing-slash strip
- Affected:
- <2.0.3
- Fixed in:
- 2.0.3
- Source:
- OSV source · Advisory
- CVE-2026-5051
Audit Log Plugin Directory Guard Bypass via Legacy path Option
- Affected:
- >=1.19.0,<2.0.1
- Fixed in:
- 2.0.1
- Source:
- OSV source · Advisory
- CVE-2026-5807
Vault Vulnerable to Denial-of-Service via Unauthenticated Root Token Generation/Rekey Operations
- Affected:
- <2.0.0.
- Fixed in:
- 2.0.0.
- Source:
- OSV source · Advisory
- CVE-2026-4525
Vault Token Leaked to Backends via Authorization: Bearer Passthrough Header
- Affected:
- >=0.11.2,<2.0.0
- Fixed in:
- 2.0.0
- Source:
- OSV source · Advisory
- CVE-2026-5052
Vault Vulnerable to Server-Side Request Forgery in ACME Challenge Validation via Attacker-Controlled DNS
- Affected:
- >=1.14.0,<2.0.0
- Fixed in:
- 2.0.0
- Source:
- OSV source · Advisory
- CVE-2026-3605
Vault KVv2 Metadata and Secret Deletion Policy Bypass Denial-of-Service
- Affected:
- >=0.10.0,<2.0.0
- Fixed in:
- 2.0.0
- Source:
- OSV source · Advisory
- CVE-2025-12044
Vault Vulnerable to Denial of Service Due to Rate Limit Regression
- Affected:
- >=1.20.3,<1.21.0
- Fixed in:
- 1.21.0
- Source:
- OSV source · Advisory
- CVE-2025-11621
Vault AWS auth method bypass due to AWS client cache
- Affected:
- >=0.6.0,<1.21.0
- Fixed in:
- 1.21.0
- Source:
- OSV source · Advisory
- CVE-2025-6203
Vault unauthenticated denial of service through complex json payload
- Affected:
- >=1.15.0,<1.21.0
- Fixed in:
- 1.21.0
- Source:
- OSV source · Advisory
- CVE-2025-6013
Vault LDAP MFA Enforcement Bypass When Using Username As Alias
- Affected:
- >=1.20.0,<1.20.2
- Fixed in:
- 1.20.2
- Source:
- OSV source · Advisory
- CVE-2025-6015
Vault Login MFA Bypass of Rate Limiting and TOTP Code Reuse
- Affected:
- >=1.20.0,<1.20.1
- Fixed in:
- 1.20.1
- Source:
- OSV source · Advisory
Compare versions
Side-by-side view of the most relevant release lines.
Recent releases
Latest release date 2026-09-01 · 2 in last 30 days · 4 in last 90 days
- 2026-09-01
- 2026-08-04
- 2026-06-17
- 2026-06-05
- 2026-05-19
- 2026-04-14
- 2026-03-05
- 2026-03-04
- 2026-01-07
- 2025-11-19
Should I upgrade?
Current versions are supported
The preferred supported release line is HashiCorp Vault 2.1 (standard support).
HashiCorp stack
Terraform, Vault, Consul, and Packer from HashiCorp — release history from official GitHub repositories.
Data coverage
- Version lines
- 19
- Concrete releases
- 155
- Supported lines
- 19
- EOL lines
- 0
- Lifecycle coverage
- 19/19
- EOL coverage
- 0/19
- Provenance coverage
- 19/19
Data freshness
Last checked = last successful upstream check. Latest source update = when upstream content last changed.
- Data last checked
- 2026-09-01
- Latest source update
- 2026-09-01
Sources
First-party and other registered sources contributing release and lifecycle facts.
- Vault GitHub Releasesfirst party · high
Official source: https://github.com/hashicorp/vault/releases
Last verified 2026-09-01
- OSV.devfirst party
Official source: https://osv.dev
Last checked 2026-09-01
- NVD (NIST)first party
Official source: https://nvd.nist.gov
Last checked 2026-09-01
- CISA Known Exploited Vulnerabilitiesfirst party
Official source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
Last checked 2026-09-01
Version line directory
Complete navigation into detailed version-line pages.
Currently supported
| Version line | Status | Latest release | Released | EOL |
|---|---|---|---|---|
| 2.1 | standard supportlow | 2.1.0 | 2026-09-01 | Not officially published |
| 2.0 | standard supportlow | 2.0.4 | 2026-08-04 | Not officially published |
| 1.21 | standard supportlow | 1.21.4 | 2026-03-05 | Not officially published |
| 1.20 | standard supportlow | 1.20.4 | 2025-09-24 | Not officially published |
| 1.19 | standard supportlow | 1.19.5 | 2025-05-29 | Not officially published |
| 1.18 | standard supportlow | 1.18.5 | 2025-02-24 | Not officially published |
| 1.17 | standard supportlow | 1.17.6 | 2024-09-25 | Not officially published |
| 1.16 | standard supportlow | 1.16.3 | 2024-05-29 | Not officially published |
| 1.15 | standard supportlow | 1.15.6 | 2024-02-29 | Not officially published |
| 1.14 | standard supportlow | 1.14.10 | 2024-02-29 | Not officially published |
| 1.13 | standard supportlow | 1.13.13 | 2024-01-30 | Not officially published |
| 1.12 | standard supportlow | 1.12.11 | 2023-09-12 | Not officially published |
| 1.11 | standard supportlow | 1.11.12 | 2023-06-20 | Not officially published |
| 1.10 | standard supportlow | 1.10.11 | 2023-03-01 | Not officially published |
| 1.9 | standard supportlow | 1.9.10 | 2022-09-29 | Not officially published |
| 1.8 | standard supportlow | 1.8.12 | 2022-06-09 | Not officially published |
| 1.7 | standard supportlow | 1.7.10 | 2022-03-03 | Not officially published |
| 1.6 | standard supportlow | 1.6.7 | 2021-09-29 | Not officially published |
| 1.5 | standard supportlow | 1.5.9 | 2021-05-21 | Not officially published |