Security & Privacy

Fixed a bug where the Fleet-maintained app auto-update job could keep an app's previous install script after downloading a newer version, causing the install to fail; Fixed…

Wipr Extra improvements on many websites; User Interface improvements

Support for scanning Dart packages; Support for scanning Helm charts; Support for scanning Java archives with improved detection; Support for scanning Ruby packages; Improved…

Enforce permission check when issuing passkey enrollment codes; Require MFA prompt step before 2FA enrollment

Optimize core service; Optimize Android TV launcher icon; Optimize back navigation; Optimize app layout; Optimize focus control; Adjust android process; Fix some issues

Block Login V2 auth for users in deactivated organizations; Enforce permission check when issuing passkey enrollment codes; Prevent the browser from requesting OTP codes via…

Debug output now includes per-request timing; Debug output now reports more information when a vault cannot be read; Reporting item usage for cached items no longer delays reading…

semgrep-core -version now reports the git commit that the binary was built from; Pro: Added a nodiskcache memory policy (--x-mem-policy nodiskcache) to trade higher memory usage…

Reworked Agent Network endpoint identity and settings bootstrap; Added a proxy-connect authorizer seam for Agent Network; Added reverse proxy usage accounting for activity…

This release includes performance and logging improvements.

Debug output now includes per-request timing; 1Password Environments commands are now significantly faster on Apple silicon Macs; Debug output now reports more information when a…

Flexible Password Policy for database connections is now generally available

Fix sharkd crash (wnpa-sec-2026-64); Fix sharkd crash (wnpa-sec-2026-65); Fix UMTS FP protocol dissector crash (wnpa-sec-2026-66); Fix RDP protocol dissector crash…

Fix sharkd crash; Fix UMTS FP protocol dissector crash; Fix RDP protocol dissector crash; Fix TTX Logger file parser crash; Fix dissection engine reassembly crash; Fix BUSMASTER…

Redesigned signup experience with clearer presentation of plan options and free trial eligibility; Upfront privacy choice about sharing usage data during signup; Improved sign-in…

Optimize connection quality for faster and more stable connections; Fix known issues and continuously enhance the user experience

Fixed the layout of the screen shown when VPN permission isn't granted so it no longer overlaps the system top bar; Improved connection stability on Proton Protocols by fixing MTU…

PeerRelays are deployable in-cluster via a custom resource

Update create sub org modal to v3; Add MI to PAM access; Fix CSR flow on ADCS issuance

Custom signup and login fields and consent checkboxes configured in Universal Login now capture the same data on Social and Enterprise connections as they do on database and…

Reworded "Enable HTML noscript elements" to "Show HTML noscript elements" for clarity; Added a note in the extension popup window that website permissions are managed in Safari…

Improve lua script with args and values; Add gRPC JavaScript library; Render element locators before lookup in headless protocol; Add duration fields to other events in protocols…

Prewarm posture check cache on network map generation; Re-arm the WireGuard watcher after a lazy wake; Detect community GHCR images during enterprise migration; Disambiguate the…

MultiHop Servers feature for two-step encrypted connections to enhance privacy; Static IP Servers for fixed IP addresses to support remote work, gaming, or specific services…

Add gateway support to chef app connection; Migrate project settings to v3 components; Add Modify Role action for project member role rows

Pahole more structs to drop gaps and reduce struct size; Make RCons authoritative for command help rendering; Unify the struct and union member model into RAnalTypeMember; Use BE…

Fixed race condition overriding selected location; Addressed security concern; Clear keystore after use; Added permissions blocks; Removed duplicate lookup; Fixed snooze remaining…

Updated libraries

Configurable inactivity thresholds for automatically removing old IPs, endpoints, and clients; Bulk reporting for incorrectly blocked or allowed domains; Ability to choose Block…

macOS MDM deployment support allowing organizations to download preconfigured profiles and installer packages directly from provisioning instructions

Burp AT no longer incorrectly displays a license error when unable to refresh your session

Optimize connection quality for faster and more stable connections; Fix known issues and continuously enhance the user experience

Wipr Extra improvements on many websites

Improve command line validation in openvpnserv on Windows to prevent circumventing admin restrictions on allowed OpenVPN config directories; Make DCO key state desynchronization…

Better scrutinize command line passed from the control socket to openvpn on Windows to prevent circumventing admin restrictions on allowed OpenVPN config directories; Make key…

Added ability to upload multiple custom packages (up to 10) for the same software title on a team, with first-added package installed when a host matches more than one; Added…

Memory-consumption hang in Ncat's HTTP proxy code in both connect and listen modes; Patched included libssh2 source with upstream fixes for CVE-2025-15661, CVE-2026-7598…

Fix JWE request object bypassing requestObjectSignatureAlg enforcement in OIDC; Fix privilege escalation via hardcoded role mapper injection in manage-clients; Fix user disclosure…

Preserve whitespace characters in logger; Improve proxy-apply utility scriptlet; Improve abort-current-script scriptlet; Improve prevent-addEventListener scriptlet; Add shim for…

Improved 'Add Rules' window logic with better handling of deleted/invalid rules; Improved startup with new checkin logic to handle upgrade cases better

Localization added to the list of locations (state/city).; Location names refresher added.; Error messages are now translated.; Missing strings translation fixed.

Update the Linux kernel to 6.12.100 to fix critical security vulnerabilities; Update the expat XML library to fix critical security vulnerabilities

Remove gnupg, openssl, and procps packages from UBI based container images; Fix privilege-escalation vulnerability where a deniedparameters constraint on the policies request…

Fixed the layout of the screen shown when VPN permission isn't granted to no longer overlap the system top bar; Improved connection stability on Proton Protocols by fixing MTU…

Arti is our ongoing project to create a next-generation Tor implementation in Rust. We're happy to announce the latest release, Arti 2.5.1. This release consists mostly of…

Add support for detecting vulnerabilities in Dart/Flutter packages; Add Kubernetes config scanner support; Add SBOM generation for container images; Improve performance of…

Add rule option for Process + Kids to apply a rule to a process and any children of it; Improve handling of no client by creating new rules that show up in Passively created rules…

We're always working on new features, bug fixes, and performance improvements. Make sure you stay updated with the latest version for the best authentication experience.

Remove deprecated wazuh-dbd daemon and databaseoutput configuration; Improve cluster payload buffer allocation strategy; Improve cluster archive decompression limits; Improve…

Masked authd.pass in configuration API responses for users without update permissions; Fixed analysisd plugin decoder argument alignment; Fixed path traversal in authd via agent…

Avoid controller panic if a Certificate sets spec.renewal.policy=Disabled; Fix Issuer/ClusterIssuer stuck at Ready=False/InvalidSolver after a missing ACME DNS-01 solver Secret is…

Resolve issues with invites by always sending initOrganization and orgUserHasExistingUser in invite URL; Fix Alpine based image build issue with OpenSSL compilation by using newer…

Fix tagged node stuck expired after tailscale logout, unable to re-authenticate; Re-registering a tagged node with a different pre-auth key now applies the new key's tags instead…

Added support for the OpenTofu .tofu file extension, which are now automatically detected and scanned as Terraform; Updated the Ruby parser to tree-sitter-ruby v0.23.1, improving…

Fix SSRF via the icon endpoint; Fix Cross-Organization Cipher Access; Fix Organization Policy Bypass on Directory Import; Fix Send Access-Count Bypass; Fix Unauthenticated…

Updated Firefox to 140.13.0esr; Updated NoScript to 13.6.31.1984; Backport Security Fixes from Firefox 153

Keeper direct importer; KeePass KDBX importer; Controls for send policy access dropdown; Stacked drawer support with back button; Native messaging permission default enabled on…

We're always working on new features, bug fixes, and performance improvements. Make sure you stay updated with the latest version for the best authentication experience.

Revert locale-driven flow re-request from FlowExecutor; Drop curl and runit from container lifecycle; Pass populatepolicies in enterprise fleet connector endpoints; Use positive…

Bug fixes.