Skip to content

Release Notes

Release notes for the October, 11 2026 update

Update Version 4.1.202610091101

New Features

Added Universal Remote Application Launcher Through an RDS Jump Host

Added support for scriptable application access through a generic RDS RemoteApp that launches and controls applications using scripts selected in the asset configuration.

This capability enables Zero Trust application access with credential injection and full session recording through a secure Remote Desktop Services (RDS) jump host.

The Universal Remote Application Launcher uses a single executable and INI configuration file with dedicated sections for individual applications. It supports keyboard navigation, text input, argument templates populated from asset fields, window-aware scripting commands (winwait, ifwin, abortif), session-specific process cleanup, and forced logoff upon exit.

Extensions

  • Added time zone information to the expiration time on the safe link display.

  • Added support to display asset name in the browser tab title for the WEB Sessions windows.

  • Added support to use RunAs:Field variables in the Remote Application scripts to reference field values from the member asset used to connect to the RDS server.

  • Added support for number values in variables passed to the remote application scripts.

  • Added support for displaying certificate and navigation errors on the Web HTTP Session screen.

Security

Components Update

  • Updated application WEB framework to the latest version.

  • Updated WEB HTTP Sessions driver to the latest version.

  • Updated database access component to the latest version.

  • Updated network streaming component to the latest version.

  • Updated terminal emulator component to the latest version.

  • Updated dashboard charts component to the latest version.

  • Updated client side markdown toolkit to the latest version.

  • Updated code editor component to the latest version.

  • Updated PostgreSQL driver to the latest version.

Fixes

  • Fixed the issue with session duplication for the connections established using native PowerShell clients.

  • Fixed the issue with recovering from the duplicated sessions conditions for the connections established using native PowerShell clients.

  • Fixed the issue that caused an error message in the Auditor Web GUI when following a link to join an active session.

  • Fixed the issue that caused disabled built-in configurations, such as templates, to be duplicated during application startup.

Labs

Added Modern Software Maintenance Component

Introduced a modernized software installation, update, and uninstallation component with the following capabilities:

  • Unified binary for installation, updates, and uninstallation across Linux and Windows platforms, x86 and ARM architectures, interactive and silent modes, and online and offline operations.

  • Digital signature verification of downloaded components during online installation and updates across all supported platforms.

  • GUI-based installation, updates, and uninstallation on Windows.

  • MSI packaging for offline installation on Windows.

  • Integration with Windows Add or Remove Programs for software management.

Release notes for the October, 4 2026 update

Update Version 4.1.202610021011

Extensions

  • Added Gateway Version information, including versions of major Gateway components, to the About screen.

  • Added a Refresh button to the System Performance section of the About screen to monitor current application and host metrics.

  • Added a link to the application update documentation in the Latest Versions section title on the About screen.

Security

Components Update

  • Updated application WEB framework to the latest version.

  • Updated WEB Session RDP driver to the latest version.

  • Updated WEB Session SSH driver to the latest version.

  • Updated database access component to the latest version.

  • Updated REST API component to the latest version.

  • Updated dashboard charts component to the latest version.

  • Updated SSH proxy component to the latest version.

  • Updated string management toolkit to the latest version.

Fixes

  • Fixed the issue with VM Uptime label on the About screen.

  • Fixed the VM Uptime value on the About screen to display in a human-readable format.

  • Fixed the issue with SSH proxy authentication using a public key.

  • Fixed the issue where the in-session File Manager button was available to users joining a Web session.

  • Fixed the issue preventing Site Auditors from uploading the command-line tool to Unix endpoints during Web sessions.

  • Fixed the issue where the Session URL button became available before the session was created.

  • Improved performance when replicating transactions on the receiving node.

  • Fixed the issue that created orphaned journal replication logs and prevented replicated journals from completing.

Release notes for the September, 27 2026 update

Update Version 4.1.202609251551

Extensions

  • Added options in Web RDP sessions operating under command filter control to open a Command Prompt or PowerShell window, or log out of the session, using either the control menu or the /cmd, /ps (/PowerShell), and /exit commands.

  • Added initially hidden StartTLS, Protocol, and Host Name Verification fields to the LDAP Administrator and LDAP HA Administrator asset types to customize LDAP connections used by scripts for password verification, password changes, and account unlocking.

  • Added the Verify Host Name option to the LDAP configuration screen for SSL connections to ensure the connection URL matches the server certificate.

  • Added the Active Directory LDAP Unlock Account and Set Password by Shadow script to the LDAP User asset type.

  • Added the option to disable workflow notifications by selecting the Disabled notification template for approval, approved, or rejected actions on the Workflow Form editing screen.

  • Added Database Driver to perform database maintenance activities using site scripts manipulating database objects as an alternative of connecting directly to the database.

  • Added the Tenant Workflow Selector Report to display the status of all workflow selectors and their relationships with assets and sites.

Security

Components Update

  • Updated application WEB framework to the latest version.

  • Updated database access component to the latest version.

  • Updated terminal emulator to the latest version.

  • Updated dashboard charts component to the latest version.

  • Updated Code Editor component to the latest version.

  • Updated client side markdown component to the latest version.

  • Updated internal scripting language component to the latest version.

  • Updated data management component to the latest version.

  • Updated cryptography module utility component to the latest version.

  • Updated system log connector component to the latest version.

  • Updated WEB HTTP sessions driver to the latest version.

  • Updated client side document sanitation component to the latest version.

  • Updated HTTP communication toolkit to the latest version.

  • Removed the runtime dependency on the Duo Security SDK and replaced it with a native implementation to eliminate dependencies with known vulnerabilities.

  • Removed the runtime dependency on the UTAH Parser and replaced it with a native implementation to eliminate dependencies with known vulnerabilities.

  • Removed the runtime dependency on the Web Console Standard Tag Library and replaced it with a native implementation to eliminate dependencies with known vulnerabilities.

Fixes

  • Fixed the issue with removing duplicated cached users that have collected transit credentials when synchronizing users with the source user directory.

  • Fixed the issue with direct login to the application with Entra ID credentials.

  • Fixed the issue with the visual alignment of long field labels on the asset view screen.

  • Fixed the issue that allowed Site Auditors to unlock asset secrets without the required permissions.

  • Improved the display of request action data in system logs by using readable properties to simplify workflow troubleshooting.

  • Fixed the issue with mass action requests hiding forms that were disabled for unrelated assets in the vault.

Release notes for the September, 20 2026 update

Update Version 4.1.202609191521

New Features

Added Support for Zero Trust AWS CLI Sessions

Added Just-in-Time (JIT), Zero Trust access option to AWS management through the AWS Command Line Interface (CLI). This release introduces a new Asset Type — AWS — enabling brokered AWS CLI sessions with credential injection and full session auditing.

Capabilities include:

  • Shared credentials for accessing the AWS tenant, brokered from the Credential Vault
  • Credential injection into AWS CLI traffic, so credentials are never disclosed to the user or client device
  • Role-based access control (RBAC) for AWS CLI sessions and to in-session activities such as download and upload files
  • Interactive multi-level approval or automatic approval workflows for access requests
  • Session auditing and on-demand termination
  • Full session transcripts generated for post-session analysis
  • Session event logging for each executed command
  • Session Intelligence, delivering real-time notifications or automatic session termination based on anomalous user activity
Added Site-Level Subscription Reporting for Site Administrators

Site administrators can now review and manage notification subscriptions for other users at the site level. This includes subscribing users to notifications, as well as updating or deleting their existing subscriptions.

Extensions

  • Added support to report PowerShell MS Graph commands executed in Zero Trust sessions as session events to enable reporting, notifications and session intelligence actions and analytics.

  • Renamed PowerShell MS Graph channel to GRAPH.

  • Added support for the StartTLS extension for secure connections to LDAP servers and Microsoft Domain Controllers.

  • Added the option to enforce transport protocol in LDAP integrations.

  • Added support for applying multiple transport protocols when verifying and trusting certificates in the tenant key store in addition to automatic protocol negotiation.

  • Added support for triggering asset tasks on unlock or access request approval, enabling automated provisioning of access or accounts on endpoints across various Zero Trust access scenarios.

  • Added Active Directory LDAP script to unlock MS Active Directory account.

  • Added the option to delete import entries.

  • Added an option to the Users Report to synchronize user metadata with the source user directory.

Security

Components Update

  • Updated server side run time framework to the latest version.

  • Updated application WEB framework to the latest version.

  • Updated application WEB container to the latest version.

  • Updated database access component to the latest version.

  • Updated terminal emulator to the latest version.

  • Updated dashboard charts component to the latest version.

  • Updated client side markdown toolkit to the latest version.

  • Updated Code Editor component to the latest version.

  • Updated Duo Security driver to the latest version.

  • Updated non-FIPS cryptography module to the latest version.

Build components update

  • Updated application build helper plugin to the latest version.

  • Updated bill of materials tracking component to the latest version.

Fixes

  • Fixed the issue with editing assets with secured required fields.

  • Fixed the issue with displaying background run type property in the Jobs report export.

  • Fixed the issue with the Auditor subscribing to asset level notifications.

  • Improved stability of backup and replication synchronization operations.

  • Added a troubleshooting system log warning for repeating database operations, to help monitor database access health.

  • Fixed the issue with the rudimentary warning messages during installation on Linux platforms.

  • Fixed the issue with the error message about detecting current framework version for 5-element versions during application update on the Windows platforms.

Release notes for the September, 13 2026 update

Update Version 4.1.202609111504

New Features

Extended authentication support for the password filler browser extension

Enhanced the browser extension to support a broader range of Web Portal authentication flows:

  • Added support for TOTP challenges during Web Portal authentication.
  • Added support for multi-page Web Portal authentication flows.
  • Improved the performance and reliability of Web Portal authentication.

Extensions

  • Added a warning message to the application dashboard when the application is not activated, with Installation ID as well as links explaining how to start the activation process and obtain an activation code.

  • Added Installation ID to the About screen.

  • Added a Full option to the replication synchronization control for quickly selecting a complete synchronization as an alternative to an incremental synchronization.

  • Added password validation check after password set flow to the LDAP password reconciliation script.

  • Added an option for mass action requests to automatically select the first available workflow form for each asset, as an alternative to selecting a specific workflow form shared by all selected assets.

  • Added an additional Import button to the bottom of Import SSL Certificate screen.

Security

Security Updates
  • Added support for FIPS-compliant WEB SSL certificate store generated during application installation.
Components Update

  • Updated application WEB framework to the latest version.

  • Updated WEB HTTP Sessions driver to the latest version.

  • Updated internal scripting language component to the latest version.

  • Updated terminal emulator component to the latest version.

  • Updated client side document sanitation component to the latest version.

  • Updated client side markdown toolkit to the latest version.

  • Updated MS SQL Server driver to the latest version.

  • Updated network streaming component to the latest version.

  • Updated dashboard charts component to the latest version.

  • Replaced the legacy ED cryptographic keys management component with the newer implementation.

Fixes

  • Fixed the issue with blanket error message when completing already completed jobs.

  • Fixed the issue with the title of the mass complete request results screen.

  • Fixed the issue with mass completing requests for the selected assets.

  • Fixed an issue on the mass request screen with identifying common request forms for multiple selected assets when the workflow selector is linked at the parent or root container level.

  • Fixed the issue with missing asset name on the mass request and mass complete actions operations results.

  • Fixed the issue with recording shared drive file transfer events for sessions using native desktop or mobile RDP clients.

  • Optimized performance of asset metadata access.

  • Fixed the issue with blanket error on the screen when adding base asset on the asset editing screen.

  • Improved reliability of the asset update logic after password reset.

  • Improved reliability of listing assets.

Release notes for the September, 6 2026 update

Update Version 4.1.202609041716

New Features

Added Zero Trust access to Microsoft SQL Server Management Studio using modern authentication

Added the option to launch Microsoft SQL Server Management Studio (SSMS) using modern authentication within Zero Trust sessions on RDS jump hosts through both WEB client and native desktop or mobile RDP clients.

The option injects credentials into the remote application before unblocking user keyboard and mouse controls. The option never releases credentials to the RDS server or to the destination application to the user client.

Extensions

  • Improved the reliability of the browser extension when filling login forms that require TOTP authentication.

  • Added support to preserve column selection, filters and sort order for the Events, Jobs, Sessions and Requests reports with the option to reset to the factory defaults.

  • Added simple and advanced modes to the cron schedule builder, with simple mode selected by default.

  • Simplified message confirmation flow when testing Entra ID connections.

  • Added Asset Node information to the Asset Audit report.

  • Added the option to search assets by node.

Security

Components Update

  • Updated cryptographic module to the latest version.

  • Updated application WEB framework to the latest version.

  • Updated REST API documentation component to the latest version.

  • Updated database access component to the latest version.

  • Updated database pool component the latest version.

  • Updated dashboard charts component to the latest version.

  • Updated terminal emulator component to the latest version.

  • Updated code editor component to the latest version.

  • Updated string utilities usage to the new version.

  • Updated server side logging framework the latest version.

Application build process update
  • Updated the application build tools to the latest version.

Fixes

  • Fixed the issue with displaying an incorrect Entra ID-specific message when testing the connection on the Entra ID configuration screen.

  • Fixed the issue with mass tagging, untagging and generating suggestions for the selected assets in the personal site.

  • Fixed the issue with the asset column is enabled in the default asset sessions report.

  • Fixed the issue with connecting to the remote SSH servers in the isolated networks using native SSH clients through the remote peer node.

  • Improved system logging to troubleshoot SSH Proxy connections.

  • Improved system logging to troubleshoot peer node HTTP Proxy connections.

Release notes for the August, 30 2026 update

Update Version 4.1.202608280958

New Features

Added options to manage action requests in bulk

Added the ability to select multiple assets from asset lists, Pinned Assets, or search results and submit unlock or access requests for all selected assets at once.

Approved requests can also be completed for multiple selected assets in a single action.

This simplifies managing access requests for groups of related assets and reduces the time required to initiate and complete request workflows.

Added the option to display phonetic spelling for unlocked secret fields

The function displays each character in a secret field with its corresponding word from the International Radiotelephony Spelling Alphabet, making it easier to accurately identify and communicate password characters.

Extensions

  • Added support for case-insensitive searches in the Web Console Search Center.

  • Added support for SMTP server integrations using Basic authentication without credentials.

  • Added Last Run Date column to the list of imports.

  • Added Schedule and Last Run Date to the import view screen.

  • Added the option to test LDAP, SMTP, IMAP, AWS, VMWare, Duo Security, Entra ID, Peer Node and Replication connections using the saved configuration when no changes have been made on the configuration screen.

  • Added smart job execution controls for replication peers to run jobs triggered by requests originating on the local node while suppressing jobs triggered by requests from the opposite replication peer.

Security

Components Update

  • Updated application WEB container to the latest version.

  • Updated internal scripting language to the latest version.

  • Updated database access component to the latest version.

  • Updated dashboard charts component to the latest version.

  • Updated document model sanitation component to the latest version.

  • Updated client side markdown toolkit to the latest version.

  • Updated terminal emulator component to the latest version.

Fixes

  • Fixed the issue with using distributed transaction when updating import status, collecting aggregated connections and updating asset IP address resolver information.

  • Improved troubleshooting logging for failed live replications of distributed transactions.

  • Improved troubleshooting logging about failed live replication transactions including persisting system objects.

  • Fixed the issue with default sort column on the list of imports to be the import creation date.

  • Improved the asset-saving experience by replacing the save confirmation message with a temporary notification.

  • Improved the access request experience by replacing the request submission confirmation message with a temporary notification.

  • Improved the asset deletion experience by replacing the deletion confirmation message with a temporary notification.

  • Changed log level of the jobs that cannot run because job execution is disabled on a replication peer node from error to warning.

  • Fixed the issue with incorrect availability of Import and Group Execute options on the Pinned Assets screen.

  • Changed the color of the icons that add the column to the main list of application reports from red to grey.

  • Fixed the issue with the Windows update process not terminating when file system changes fail in the application directory.

  • Fixed the issue with displaying assets count on the application dashboard to exclude containers.

  • Fixed the issue with availability of obsolete GUI option to create new term on the term selection screen in the Personal Sites.

  • Fixed the issue with login to the WEB Console Base tenant using initially created administrator logged out immediately after registration.

Release notes for the August, 23 2026 update

Update Version 4.1.202608181429

Extensions

  • Added a hostname verification option for the Operational Service on the Peer Node configuration screen, allowing connections when SSL certificate hostnames do not match the configured peer node.

  • Added group separators to the Peer Node configuration screen for clearer organization of Operational Service, Gateway, HTTP Proxy, Main Node, and Local Storage settings.

Security

Components Update

  • Updated application WEB container to the latest version.

  • Updated internal scripting language to the latest version.

  • Updated data handling component to the latest version.

  • Updated Code Editor component to the latest version.

  • Updated REST API Documentation component to the latest version.

  • Updated dashboard charts component to the latest version.

  • Updated client side markdown toolkit to the latest version.

Fixes

  • Fixed the issue with extending access requests to the time that includes zero hours, minutes or seconds.

  • Fixed the issue with localization of messages on the RDP proxy initialization screen.

  • Fixed the issue with canceling Save on Alias screen prevented further save actions.

  • Fixed the issue with the LDAP Import query had to include a wildcard to query data from the LDAP server.

  • Fixed the issue with removing periodic tasks scheduled for the asset when deleting the asset.

  • Fixed the issue with orphaned tasks scheduled for deleted assets.

  • Improved system log reporting about the replication errors to balance information in the message and the volume of reporting.

Release notes for the August, 16 2026 update

Update Version 4.1.202608141714

Extensions

  • Added support for TOTP challenge during authentication in WEB HTTP sessions.

  • Added support for multi-page wizard authentication in WEB HTTP sessions.

  • Added the option to create the initial tenant from a backup during deployment setup.

  • Added the option to disable job execution on the replication peer.

  • Improved the user experience on the tenant creation screen with clearer labels, helpful hints, and selection options.

Security

Components Update

  • Updated application WEB framework to the latest version.

  • Updated WEB HTTP Sessions driver to the latest version.

Fixes

  • Improved performance and stability of WEB HTTP sessions.

  • Improved the performance of back-end workflow activities.

  • Fixed the issue where notification errors could block subsequent notifications.

  • Fixed the issue with deep deletion of containers with complex hierarchies of nested containers.

  • Fixed the issue with the entity class label in request action notifications.

  • Fixed the issue with authentication when some configured directories have incomplete settings.

  • Fixed the issue with mass enabling assertion based SMTP configuration.

  • Fixed the issue with reusing password reset jobs across consecutive executions, ensuring Windows endpoints are properly released from workers after security context changes.

  • Improved stability of live node-to-node replication.

  • Fixed the issue with replicating cached or proxied objects during live node-to-node replication.

  • Fixed the issue with replicating updates involving complex object relationships.

  • Fixed the issue with preserving data modified in a peer tenant during replication synchronization.

  • Fixed the issue to ensure that replication synchronization and incremental backup restore delete only data created by the originating node.

  • Fixed the issue with copying tenant master keys during replication synchronization.

Release notes for the August, 11 2026 update

Update Version 4.1.202608111743

Security

Components Update

  • Updated application WEB framework to the latest version.

  • Updated dashboard charts component to the latest version.

  • Updated Unit test component to the latest version.

  • Updated HTTP communication component to the latest version.

Fixes

  • Fixed the issue with slow mouse performance in WEB HTTP Sessions

  • Optimized action request workflow component for deployments using limited-capacity back-end databases.

  • Optimized network management component for deployments using limited-capacity back-end databases.

  • Optimized import component to accommodate larger volumes of imported details and limited-capacity databases.

  • Optimized import component for deployments using limited-capacity back-end databases.

  • Fixed the issue with displaying asset name in the event report about deleted asset instead of asset id.

  • Fixed the issue with importing assets from large CSV files.