---
id: "INC-hashicorp-01M25QV97NFJ5AS3NQFCFRC98S"
kind: "incident"
aliases: []
title: "HashiCorp: Hashicorp Linux packages GPG key rotation"
severity: "high"
cvss: null
epss: null
exploited: false
status: "resolved"
category: "vendor"
products: [{"name": "HashiCorp", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["hashicorp", "incident", "linux", "security", "terraform", "vault", "vendor"]
not_affected_if: ["not-using-hashicorp-linux-repo"]
published_at: "2026-09-10T13:24:22+00:00"
first_seen_at: "2026-10-23T19:12:22+00:00"
updated_at: "2026-10-23T21:50:52+00:00"
sources: [{"source": "statuspage", "url": "https://status.hashicorp.com/incidents/01M25QV97NFJ5AS3NQFCFRC98S", "first_seen_at": "2026-10-23T19:12:22+00:00"}]
---

# HashiCorp: Hashicorp Linux packages GPG key rotation

HashiCorp had an incident involving its Linux package repository GPG signing key rotation, and the vendor reports it is resolved. The source text does not say what broke or what an attacker could have done with it.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:HashiCorp affected ? fixed ?

## How to check

Check the incident page at https://status.hashicorp.com/incidents/01M25QV97NFJ5AS3NQFCFRC98S for the affected detail.

## Fix

Re-import the current HashiCorp GPG key from the official install docs and confirm apt or yum package signature checks pass. unknown

## Timeline

- 2026-10-23T19:12:22+00:00 statuspage https://status.hashicorp.com/incidents/01M25QV97NFJ5AS3NQFCFRC98S

## From the sources

Our Engineering team has resolved the issue. These systems should now be operating normally. If you continue to experience any problems, please open a ticket with our support team.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_