Skip to content
ReleasesGitHub

Changelog — Security

Subscribe with RSS:All updatesSecurity updates

All areas
Security
Clear all

Stronger OAuth validation and Aembit Tenant UI sign-in protection

Aembit Cloud now applies stricter checks to OAuth authorization for Credential Providers and to sign-in to the Aembit Tenant UI. Aembit applied these updates to Aembit Cloud for you, so you have nothing to change.

  • Issuer verification - After a user consents, Aembit Cloud checks that the authorization server’s response comes from the issuer it discovered for the Credential Provider. A response from a different authorization server cannot complete the authorization.
  • OAuth request validation - Aembit Cloud applies tighter checks to OAuth callbacks and to the authorization server endpoints it calls.
  • Sign-in protection - The Aembit Tenant UI has stronger protection against repeated failed password sign-ins.
  • Content Security Policy - The Aembit Tenant UI sends a stricter Content Security Policy, which allows scripts and fonts from fewer outside sources.
  • Container image update - Aembit Cloud container images include the Debian security update for the published vulnerability CVE-2026-111497 in the Brotli compression library.
Tags:

Aembit Cloud and Aembit Edge stop trusting compromised eMudhra certificates

In October 2026, a compromise exposed the private keys of eight emSign intermediate certificate authorities operated by eMudhra. Anyone holding those keys can issue certificates that chain to a widely trusted root certificate. Aembit Cloud and the Aembit releases in this entry reject certificates from these certificate authorities.

Aembit Cloud

Aembit Cloud no longer trusts the emSign ECC Root CA - G3 and AAA Certificate Services root certificates, so it rejects certificates from the compromised certificate authorities. Aembit applied this change to Aembit Cloud for you.

Aembit Edge

Upgrade each of the following that you run to the listed version or later:

  • Agent Proxy 1.35.6254, for the container image and the virtual machine installers. Agent Proxy rejects certificates from the compromised certificate authorities whatever the host trust store contains.
  • Aembit CLI 1.35.6254, which rejects them the same way.
  • Agent Controller 1.35.3776, for the Linux container image. On a virtual machine, Agent Controller uses the host operating system’s trust store, so it rejects these certificates only after the host stops trusting both root certificates.
  • Agent Injector 1.35.446
  • AWS Lambda Extension and AWS Lambda Layer 1.35.199, which include Agent Proxy 1.35.6254.
  • MCP Identity Gateway 1.35.6263
  • Aembit Secrets Operator 1.35.394
  • Helm Chart 1.35.575, which deploys Agent Proxy 1.35.6254, Agent Controller 1.35.3776, and Agent Injector 1.35.446 by default.
  • AWS ECS Terraform 1.35.5, which deploys Agent Proxy 1.35.6254 and Agent Controller 1.35.3776 by default.

Aembit Terraform Provider

Aembit Terraform Provider 1.35.1 and later reject certificates from the compromised certificate authorities.

Tags:

MCP Identity Gateway 1.35.6263 security updates

MCP Identity Gateway version 1.35.6263 includes security updates.

A self-hosted MCP Identity Gateway can limit the MCP servers it connects to with the AEMBIT_NETWORK_ACCESS_POLICY environment variable. The default, any, allows MCP servers at any address. public allows only MCP servers at publicly reachable addresses. With public, MCP Identity Gateway does not use a proxy set in the host’s environment. If MCP Identity Gateway reaches MCP servers through a proxy, use any. See AEMBIT_NETWORK_ACCESS_POLICY.

This version also updates dependencies to address published security advisories.

For the latest available versions of these components, see the Edge Components Supported Versions page.

Other improvements also shipped in this build.

Tags:

Aembit Secrets Operator dependency security updates

Aembit Secrets Operator 1.34.358 updates its Go toolchain and bundled Go libraries to fix published vulnerabilities that container image scanning reported in the earlier versions. The update requires no configuration change. Upgrade to 1.34.358 or later to pick up the fixes.

These updates shipped in the same build as Aembit Secrets Operator now delivers X.509-SVID certificates. For the latest available versions, see the Edge Components Supported Versions page.

Tags:

Agent Controller dependency security updates

Agent Controller 1.34.3725 container images bundle the latest patched .NET runtime libraries, which fixes published high-severity .NET vulnerabilities that earlier container builds carried. The same build refreshes the .NET SDK base image and NuGet package dependencies. The update requires no configuration change. Upgrade to 1.34.3725 or later to pick up the fixes.

These updates shipped in the same build as the Agent Controller 1.34.3725 release. For the latest available versions, see the Edge Components Supported Versions page.

Tags:

Edge components dependency security updates

Agent Proxy 1.34.5755 and Aembit CLI 1.34.5772 fix two published Rust advisories in bundled third-party libraries: RUSTSEC-2026-0190 in anyhow and RUSTSEC-2026-0204 in crossbeam-epoch. The same build upgrades the quinn, AWS SDK, pcap, and postgres-protocol dependencies. Agent Injector 1.34.433 fixes RUSTSEC-2026-0185 in quinn-proto.

These updates shipped in the same build as the Edge components release with Agent Proxy fixes and expanded workload events.

Tags:

MCP Identity Gateway content inspection coverage

A security update for the MCP Identity Gateway broadens the MCP traffic that Content Security inspects.

The Gateway normalizes responses that MCP servers stream as server-sent events before inspection, so Content Security inspects those responses along with the rest of the session. The Gateway also applies the policy’s Fail Open on Error setting to requests it can’t read and to protocol errors. A policy set to fail closed blocks those requests.

These updates shipped in the same build as the MCP Identity Gateway 1.33.5654 release.

Tags:
Copyright © 2026. All rights reserved.Privacy PolicyTerms of ServiceTrust CenterMetadata collectionContact Aembit