Live › incident › INC-hashicorp-01M25QV97NFJ5AS3NQFCFRC98S
Go to dashboardHashiCorp had an incident involving its Linux package repository GPG signing key rotation, and the vendor reports it is resolved. The source text does not say what broke or what an attacker could have done with it.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:12 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| HashiCorp | vendor | – | – |
Check the incident page at https://status.hashicorp.com/incidents/01M25QV97NFJ5AS3NQFCFRC98S for the affected detail.
Re-import the current HashiCorp GPG key from the official install docs and confirm apt or yum package signature checks pass. unknown
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Our Engineering team has resolved the issue. These systems should now be operating normally. If you continue to experience any problems, please open a ticket with our support team.
This page as .md · .json · in your agent: get_signal("INC-hashicorp-01M25QV97NFJ5AS3NQFCFRC98S")