diff --git a/internal/openbao/bootstrap.go b/internal/openbao/bootstrap.go
index 701e97c..edbe209 100644
--- a/internal/openbao/bootstrap.go
+++ b/internal/openbao/bootstrap.go
@@ -163,6 +163,7 @@ func validateRecoveryRecipient(recipient, bundlePath string) error {
 	}
 	defer os.Remove(probePath)
 	cmd := exec.Command("age", "-r", recipient, "-o", probePath)
+	cmd.Stdin = bytes.NewReader(nil)
 	if output, err := cmd.CombinedOutput(); err != nil {
 		return fmt.Errorf("validate OpenBao recovery recipient: %w: %s", err, bytes.TrimSpace(output))
 	}