v0.26.2
Infisical/agent-vaultv0.26.2Jun 2, 2026by github-actions[bot]
AI Summary
Addresses security vulnerabilities regarding agent role management and path isolation.
Key Highlights
- Prevent non-owners from managing owner-role agents
- Block mounts that are ancestors of protected paths
Full Release Notes
## Changelog * 3beca996847868bd26970e9493fb43cb608606fc fix(auth): prevent non-owners from managing owner-role agents (#232) * 378ff6ea1ab3e617be40bca617f38e5dc968d0fb fix(isolation): block mounts that are ancestors of protected paths (#231) ## Verify ```bash # Verify checksum (portable across macOS and Linux) shasum -a 256 --ignore-missing -c checksums.txt # Verify signature (requires cosign v2+) cosign verify-blob \ --bundle checksums.txt.sig \ --certificate-identity-regexp "^https://github\.com/Infisical/agent-vault/\.github/workflows/release\.yml@refs/tags/" \ --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \ checksums.txt ```