Openbao 2.x — End of Life

Active
8 releases in this series0 CVEs

Openbao 2.x is partially supported: only 2.7 still receives security fixes. The most recent release in this series is 2.7.1. No CVE is currently tracked for Openbao 2.x.

Openbao 2.x — All releases

VersionReleasedActive supportEOL dateLatest patchStatusAlert me
2.7Sep 23, 2026—No2.7.1Active
2.6Jul 14, 2026—Oct 1, 20262.6.4EOL
2.5Feb 5, 2026—Jul 14, 20262.5.5EOL
2.4Aug 28, 2025—Feb 5, 20262.4.4EOL
2.3Jun 25, 2025—Aug 29, 20252.3.2EOL
2.2Mar 5, 2025—Jun 26, 20252.2.2EOL
2.1Nov 29, 2024—Mar 6, 20252.1.1EOL
2.0Jul 17, 2024—Nov 30, 20242.0.3EOL

CVEs affecting Openbao 2.x (0)

No CVEs tracked for Openbao 2.x.

Add a Openbao 2 EOL badge to your README

Show your users which Openbao version your project runs and whether it is still supported. The badge updates automatically. More formats and options →

Openbao 2 EOL status
[![Openbao 2 EOL status](https://eolcanary.com/badge/openbao/2.svg)](https://eolcanary.com/explore/openbao/2)

Frequently asked questions

Is Openbao 2 end of life?

Partially. 7 of the 8 Openbao 2.x releases have reached end of life. Still supported: 2.7.

What CVEs affect Openbao 2?

No CVEs are currently tracked for Openbao 2.x in the NVD data we monitor.

What is the latest Openbao 2 version?

The latest Openbao 2.x patch release is 2.7.1, released on October 1, 2026. Always run the latest patch to benefit from all security fixes.

When was Openbao 2 first released?

Openbao 2.0 was released on July 17, 2024. See the full version timeline in the table above.

Is it safe to run Openbao 2 in production?

Only on a supported release (2.7). Make sure you run the latest patch (2.7.1) to have all security fixes applied.

Data sourced from endoflife.date · CVE data from NVD · EPSS from FIRST.org · KEV from CISA