v0.26.2

Infisical/agent-vaultv0.26.2Jun 2, 2026by github-actions[bot]

AI Summary

Addresses security vulnerabilities regarding agent role management and path isolation.

Key Highlights

  • Prevent non-owners from managing owner-role agents
  • Block mounts that are ancestors of protected paths

Full Release Notes

## Changelog
* 3beca996847868bd26970e9493fb43cb608606fc fix(auth): prevent non-owners from managing owner-role agents (#232)
* 378ff6ea1ab3e617be40bca617f38e5dc968d0fb fix(isolation): block mounts that are ancestors of protected paths (#231)

## Verify

```bash
# Verify checksum (portable across macOS and Linux)
shasum -a 256 --ignore-missing -c checksums.txt

# Verify signature (requires cosign v2+)
cosign verify-blob \
  --bundle checksums.txt.sig \
  --certificate-identity-regexp "^https://github\.com/Infisical/agent-vault/\.github/workflows/release\.yml@refs/tags/" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  checksums.txt
```