HCSEC-2026-33

**Bulletin ID:** HCSEC-2026-33 **Publication Date:** September 10, 2026 **Summary** This bulletin is for informational purposes only. The HashiCorp GPG key used to sign Linux packages was rotated on September 10th, 2026. The new key fingerprint is `D55C 0D1A C78A 8D81 26CB 631C FC9C A96A CA02 6560`. The new key fingerprint is also available on our Trust Page (https://www.hashicorp.com/en/trust/security). *We deeply appreciate any effort to coordinate disclosure of security vulnerabilities. For information about security at HashiCorp and the reporting of security vulnerabilities, please see [https://hashicorp.com/security](https://hashicorp.com/security).*