Post

OpenBao patched the critical Vault RCE (9.4) on 23 September. Vault's newest release predates the fix. That gap is the exposure window - the blog has the rotation order. First move: work out which one you run. https://secureinseconds.com/blog/2026-10-04-hashicorp-vault-rce-openbao-patched