11.0.309

Agenta-AI/agenta11.0.309Aug 6, 2026by adubovikov

AI Summary

A critical security patch prevents authenticated users from escalating their privileges to admin via the user API endpoint.

Key Highlights

Fixed GHSA-24vc-w334-95wm vulnerability preventing admin role escalation.
Authenticated users can no longer assign admin role via `PATCH /api/v4/users/:id`.

New Features

Admin privilege escalation prevention

Full Release Notes

## What's Changed
* fix(security): block self-assigned admin role (GHSA-24vc-w334-95wm) by @adubovikov in https://github.com/sipcapture/homer/pull/920
* chore: bump version to 11.0.308 by @adubovikov in https://github.com/sipcapture/homer/pull/919

Security: authenticated users can no longer escalate to admin via `PATCH /api/v4/users/:id` with `user_group`.

**Full Changelog**: https://github.com/sipcapture/homer/compare/11.0.308...11.0.309