# Medusa v2.15.5 — Release & Upgrade Intelligence
- **Product:** Medusa (https://medusajs.com)
- **Version:** v2.15.5
- **Released:** Jun 01, 2026
- **Impact Score:** 5/10
- **Breaking Changes:** Not verified
- **Canonical Analysis:** https://changelogs.us/medusajs/updates/v2.15.5/

## Executive Summary (TL;DR)
Medusa v2.15.5. Source highlight: Multi-Factor Authentication

## New Features
- feat: add admin MFA UI by @christiananese in #15493
- Emit MFA lifecycle events by @christiananese in #15495
- Emailpass email verification primitives by @christiananese in #15496
- feat(dashboard,framework,rbac,js-sdk,types,utils,medusa): rbac admin dashboard utils by @fPolic in #14593
- docs: add TSDocs for "rbac admin dashboard utils (#14593)" by @shahednasser in #15476
- chore: add tests for stock location metadata in response by @jasonmerx in #15448

## Bug Fixes
- fix(core-flows): avoid refunding captures made in separate completeCartWorkflow executions by @NicolasGorga in #15527
- fix(utils): add mfa to inline snapshot test assertion by @NicolasGorga in #15518
- fix(core-flows): respect allow_backorder when calculating pickup inventory availability by @marlinjai in #15440
- Allow cancelling pending MFA setup by @christiananese in #15475
- fix(dashboard): order list status badges show correct colors when view_configurations is enabled by @shiminshen in #15430
- fix(core-flows): use hasPermission util to perform checks in validateUserRolePermissionsStep by @NicolasGorga in #15470