Starstruk Logo MarkStarstruk

v1.20.2

hashicorp/vaultv1.20.2Aug 6, 2025by hc-github-team-es-release-engineering

AI Summary

Security patch fixing a critical LDAP MFA/TOTP bypass vulnerability and template rendering issues.

Key Highlights

  • Security fix for LDAP MFA/TOTP bypass when username_as_alias is enabled.
  • Fixed template rendering issues in Vault Agent when namespace and mount path are the same.

Full Release Notes

### August 06, 2025

SECURITY:

* auth/ldap: fix MFA/TOTP enforcement bypass when username_as_alias is enabled [[GH-31427](https://github.com/hashicorp/vault/pull/31427),[HCSEC-2025-20](https://discuss.hashicorp.com/t/hcsec-2025-20-vault-ldap-mfa-enforcement-bypass-when-using-username-as-alias/76092)].

BUG FIXES:

* agent/template: Fixed issue where templates would not render correctly if namespaces was provided by config, and the namespace and mount path of the secret were the same. [[GH-31392](https://github.com/hashicorp/vault/pull/31392)]
* identity/mfa: revert cache entry change from #31217 and document cache entry values [[GH-31421](https://github.com/hashicorp/vault/pull/31421)]