WS-2026-0079

OpenBao before 2.6.3 / 2.7.0: when OpenBao Agent or Proxy was configured with requirerequestheader=true, only the proxy handler was wrapped with the X-Vault-Request header check, so the /agent/v1/quit and /proxy/v1/quit endpoints and the cache-clear endpoint accepted requests without the header...