v0.26.1

Infisical/agent-vaultv0.26.1Jun 2, 2026by github-actions[bot]

AI Summary

Fixes a critical account takeover vulnerability related to password overwrite during unverified registration.

Key Highlights

Prevent account takeover via unverified registration password overwrite

Full Release Notes

## Changelog
* e3ade6567ba6e717f66998bec98a0a3de317412c fix(auth): prevent account takeover via unverified registration password overwrite (#230)

## Verify

```bash
# Verify checksum (portable across macOS and Linux)
shasum -a 256 --ignore-missing -c checksums.txt

# Verify signature (requires cosign v2+)
cosign verify-blob \
  --bundle checksums.txt.sig \
  --certificate-identity-regexp "^https://github\.com/Infisical/agent-vault/\.github/workflows/release\.yml@refs/tags/" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  checksums.txt
```