# Woodpecker CI v3.14.1 — 3.14.1

- Product: Woodpecker CI (https://whatsnew.fyi/product/woodpecker-ci)
- Vendor: Woodpecker
- Date: 2026-05-12
- Version: v3.14.1
- Original notes: https://github.com/woodpecker-ci/woodpecker/releases/tag/v3.14.1
- Permalink: https://whatsnew.fyi/product/woodpecker-ci/releases/v3.14.1

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **security** — Server: make sure agent_id can not be spoofed by agent

##### [3.14.1](https://github.com/woodpecker-ci/woodpecker/releases/tag/v3.14.1) - 2026-05-12

###### ❤️ Special thanks the security researchers and those who fixed them ❤️

- Thanks to **Shivam Kumar ([@shivamkumarcyber](https://github.com/shivamkumarcyber))** and
  **Ranganatha Rao Sridhar (Praetorian)** _independently finding and reporting the bug_
- And [@6543](https://github.com/6543) _fixing the bugs and orchestrating the communication_

CVE-2026-50141 EUVD-2026-37897 

###### 🔒 Security

- Server: make sure agent_id can not be spoofed by agent [[#6567](https://github.com/woodpecker-ci/woodpecker/pull/6567)]