Aembit Security Changelog

Stronger OAuth validation and Aembit Tenant UI sign-in protection

Tue, 03 Nov 2026 21:26:48 GMT

Aembit Cloud now applies stricter checks to OAuth authorization for Credential Providers and to sign-in to the Aembit Tenant UI. Aembit applied these updates to Aembit Cloud for you, so you have nothing to change.

Issuer verification - After a user consents, Aembit Cloud checks that the authorization server’s response comes from the issuer it discovered for the Credential Provider. A response from a different authorization server cannot complete the authorization.
OAuth request validation - Aembit Cloud applies tighter checks to OAuth callbacks and to the authorization server endpoints it calls.
Sign-in protection - The Aembit Tenant UI has stronger protection against repeated failed password sign-ins.
Content Security Policy - The Aembit Tenant UI sends a stricter Content Security Policy, which allows scripts and fonts from fewer outside sources.
Container image update - Aembit Cloud container images include the Debian security update for the published vulnerability CVE-2026-111497 in the Brotli compression library.

Aembit Cloud and Aembit Edge stop trusting compromised eMudhra certificates

Fri, 30 Oct 2026 23:03:00 GMT

In October 2026, a compromise exposed the private keys of eight emSign intermediate certificate authorities operated by eMudhra. Anyone holding those keys can issue certificates that chain to a widely trusted root certificate. Aembit Cloud and the Aembit releases in this entry reject certificates from these certificate authorities.

Aembit Cloud

Aembit Cloud no longer trusts the emSign ECC Root CA - G3 and AAA Certificate Services root certificates, so it rejects certificates from the compromised certificate authorities. Aembit applied this change to Aembit Cloud for you.

Aembit Edge

Upgrade each of the following that you run to the listed version or later:

Agent Proxy 1.35.6254, for the container image and the virtual machine installers. Agent Proxy rejects certificates from the compromised certificate authorities whatever the host trust store contains.
Aembit CLI 1.35.6254, which rejects them the same way.
Agent Controller 1.35.3776, for the Linux container image. On a virtual machine, Agent Controller uses the host operating system’s trust store, so it rejects these certificates only after the host stops trusting both root certificates.
Agent Injector 1.35.446
AWS Lambda Extension and AWS Lambda Layer 1.35.199, which include Agent Proxy 1.35.6254.
MCP Identity Gateway 1.35.6263
Aembit Secrets Operator 1.35.394
Helm Chart 1.35.575, which deploys Agent Proxy 1.35.6254, Agent Controller 1.35.3776, and Agent Injector 1.35.446 by default.
AWS ECS Terraform 1.35.5, which deploys Agent Proxy 1.35.6254 and Agent Controller 1.35.3776 by default.

Aembit Terraform Provider

Aembit Terraform Provider 1.35.1 and later reject certificates from the compromised certificate authorities.

Agent Controller 1.35.3776 security updates

Thu, 29 Oct 2026 04:10:00 GMT

Agent Controller version 1.35.3776 includes security updates to its container image. The update requires no configuration change. Upgrade container deployments to 1.35.3776 or later to pick up the updates.

Other improvements also shipped in this build. For the latest available versions, see the Edge Components Supported Versions page.

MCP Identity Gateway 1.35.6263 security updates

Wed, 28 Oct 2026 18:08:00 GMT

MCP Identity Gateway version 1.35.6263 includes security updates.

A self-hosted MCP Identity Gateway can limit the MCP servers it connects to with the AEMBIT_NETWORK_ACCESS_POLICY environment variable. The default, any, allows MCP servers at any address. public allows only MCP servers at publicly reachable addresses. With public, MCP Identity Gateway does not use a proxy set in the host’s environment. If MCP Identity Gateway reaches MCP servers through a proxy, use any. See AEMBIT_NETWORK_ACCESS_POLICY.

This version also updates dependencies to address published security advisories.

For the latest available versions of these components, see the Edge Components Supported Versions page.

Other improvements also shipped in this build.

MCP Identity Gateway rejects expired access tokens sooner

Wed, 14 Oct 2026 21:21:00 GMT

MCP Identity Gateway version 1.35.6086 accepts an access token for up to 3 seconds after it expires, down from 60 seconds. Make sure MCP clients refresh their access tokens before the tokens expire. See Token and credential details.

For the latest available versions of these components, see the Edge Components Supported Versions page.

Aembit Cloud security updates

Wed, 14 Oct 2026 00:52:55 GMT

Enhanced security for sign-in to the Aembit Tenant UI, including single sign-on.

MCP Identity Gateway security updates

Wed, 07 Oct 2026 18:33:00 GMT

MCP Identity Gateway version 1.34.6034 includes security updates.

For the latest available versions of these components, see the Edge Components Supported Versions page.

Edge components dependency security updates

Mon, 05 Oct 2026 19:24:33 GMT

Agent Proxy 1.34.6014 fixes the published Rust advisory RUSTSEC-2026-0258 in the bundled h2 HTTP/2 library. Aembit CLI has included the same fix since version 1.34.5772.

This update shipped in the same build as the Edge components release with Ubuntu 26.04 support.

Aembit Cloud security updates

Wed, 23 Sep 2026 02:57:18 GMT

Enhanced security for the OAuth 2.0 Authorization Code Credential Provider.

Aembit Secrets Operator dependency security updates

Thu, 17 Sep 2026 23:55:00 GMT

Aembit Secrets Operator 1.34.358 updates its Go toolchain and bundled Go libraries to fix published vulnerabilities that container image scanning reported in the earlier versions. The update requires no configuration change. Upgrade to 1.34.358 or later to pick up the fixes.

These updates shipped in the same build as Aembit Secrets Operator now delivers X.509-SVID certificates. For the latest available versions, see the Edge Components Supported Versions page.

Agent Controller dependency security updates

Thu, 17 Sep 2026 23:55:00 GMT

Agent Controller 1.34.3725 container images bundle the latest patched .NET runtime libraries, which fixes published high-severity .NET vulnerabilities that earlier container builds carried. The same build refreshes the .NET SDK base image and NuGet package dependencies. The update requires no configuration change. Upgrade to 1.34.3725 or later to pick up the fixes.

These updates shipped in the same build as the Agent Controller 1.34.3725 release. For the latest available versions, see the Edge Components Supported Versions page.

MCP Identity Gateway security updates

Tue, 15 Sep 2026 20:05:00 GMT

MCP Identity Gateway version 1.34.5794 includes security updates.

For the latest available versions of these components, see the Edge Components Supported Versions page.

Edge components dependency security updates

Thu, 27 Aug 2026 17:00:00 GMT

Agent Proxy 1.34.5755 and Aembit CLI 1.34.5772 fix two published Rust advisories in bundled third-party libraries: RUSTSEC-2026-0190 in anyhow and RUSTSEC-2026-0204 in crossbeam-epoch. The same build upgrades the quinn, AWS SDK, pcap, and postgres-protocol dependencies. Agent Injector 1.34.433 fixes RUSTSEC-2026-0185 in quinn-proto.

These updates shipped in the same build as the Edge components release with Agent Proxy fixes and expanded workload events.

MCP Identity Gateway content inspection coverage

Fri, 07 Aug 2026 21:00:00 GMT

A security update for the MCP Identity Gateway broadens the MCP traffic that Content Security inspects.

The Gateway normalizes responses that MCP servers stream as server-sent events before inspection, so Content Security inspects those responses along with the rest of the session. The Gateway also applies the policy’s Fail Open on Error setting to requests it can’t read and to protocol errors. A policy set to fail closed blocks those requests.

These updates shipped in the same build as the MCP Identity Gateway 1.33.5654 release.

MCP Identity Gateway dependency security updates

Tue, 28 Jul 2026 20:00:00 GMT

A security update for the MCP Identity Gateway advances two bundled third-party libraries to their latest patched releases, keeping the Gateway current with published advisories.

These updates shipped in the same build as the MCP Identity Gateway 1.33.5547 release.

Agent Controller container security hardening

Wed, 08 Jul 2026 15:15:25 GMT

Agent Controller 1.32.3541 includes security hardening for the container image that reduces its attack surface and strengthens supply chain integrity. The image now ships with a bundled software bill of materials for greater transparency into its contents.

MCP Identity Gateway session IDs are now bound to the authenticated user

Tue, 30 Jun 2026 19:26:33 GMT

MCP Identity Gateway now binds each session ID to the authenticated user, closing a privilege-escalation gap where one user’s session could carry over to another identity.

This change requires no configuration. It ships in MCP Identity Gateway 1.32.5098, alongside the workload event correlation and platform fixes in this build; see the event correlation and platform fixes entry.

Agent Proxy security update for a DNS library vulnerability

Thu, 04 Jun 2026 12:00:00 GMT

A security update for Agent Proxy resolves a vulnerability in a bundled DNS library.

This fix shipped in the same build as the Edge components release with reliability, CLI, and MCP enhancements, across the Agent Proxy container, virtual machine package, and AWS Lambda deployments.

Edge components release with container base image security update

Thu, 02 Oct 2025 12:00:00 GMT

Aembit has released new versions of the following components and packages:

Helm Chart
Terraform ECS module
AWS Lambda Extension
AWS Lambda Layer
Agent Proxy
Agent Injector
Sidecar Init

For the latest available versions of these components, see the Edge Components Supported Versions page.

Key Updates:

Applied a security enhancement to container-base images

Aembit container images are now cryptographically signed

Tue, 24 Jun 2025 12:00:00 GMT

Aembit now cryptographically signs all container images in Aembit’s Docker Hub repositories. See Verifying Aembit container image signatures for more details and how to verify Aembit container images.

Kerberos and PKI security enhancements for Agent Proxy

Mon, 02 Jun 2025 12:00:00 GMT

Aembit has released a new version of Agent Controller, version 1.23.2160, with the following changes:

Security enhancements for Kerberos and Aembit-managed PKI.
Added the AEMBIT_HTTP_PORT_DISABLED environment variable to enable you to disable Agent Controller’s HTTP port.

Updated Edge Components:

Agent Proxy 1.23.2160

Updated Edge Packages:

Helm Chart 1.23
Terraform ECS module 1.23

See Edge Components supported versions for more details.