1.2.6

PX4/PX4-Autopilot1.2.6Sep 24, 2026by github-actions[bot]

Upgrading?

AI Summary

A maintenance release focused on security hardening, agent stability, and desktop UI improvements, including fixes for Windows WMI, remote desktop functionality, and MongoDB performance.

Key Highlights

  • Agent signature verification even when ignoreAgentHashCheck is set
  • Per-device rights enforcement for SQL drivers
  • Windows WMI and Remote Desktop key fixes
  • MongoDB performance fixes preventing COLLSCANs
  • Desktop UI fullscreen browser mode and privacy bar option

New Features

  • Restriction of new agent enrollment by source address/IP
  • Enforcement of No-Files permission on device file downloads
  • Multiple search filter support
  • Keyboard and mouse position fixes for remote desktop

Full Release Notes

- 029b7338 Version 1.2.6
- 2bbe3e55 add new sep 2026 agents for testing
- c146225f Verify the agent signature even when ignoreAgentHashCheck is set (#8171)
- 3f3331d3 Apply per-device rights to the single-device query (SQL drivers) (#8170)
- 9864ae39 win-wmi-fixed: workaround handle leak (#8168)
- ed76eba1 Restrict new agent enrollment by source address (#8140)
- 22072142 Limit new agent registrations by source IP (#8137)
- ed0a7de7 Linux agent: parse dmidecode -u strings correctly so Intel AMT is detected (#8162)
- 2a077f3e Enforce No-Files permission on device file download endpoint (#8164)
- 3ae11a5d Multiple search filter (#8129)
- 092eabb0 Add desktop privacy bar width option (#8138)
- 57898258 Fix Right Shift key in remote desktop on Windows agents (#8153)
- d8b229c0 fix(db): prevent MongoDB COLLSCANs and eliminate destructive index resets (#8158)
- e6804c38 Fix: send compressed core if supported (#8160)
- 9f328938 meshcore: update 'service' command (#8147)
- 65e7d49a meshcore: Replace 3x 'delete <var>' with undefine (#8149)
- f15d30d2 Align device share guest checks for HTTP and HTTPS shares (#8154)
- 02eb8f71 Fix: keyboard stops working after desktop reconnect (#8135)
- a2f73687 Parse PIE crash frames and the ASLR base= line in util-agentlog (#8081)
- 7b53a277 add raspberry pi bios_vendor
- 69c9c4ae handleUploadFileBatch: use a sanitized filename for the upload temp target (#8126)
- 9cf85383 Fix timestamp parsing for 12/24-hour formats, guard peek() calls, and correct 12 AM to 00 conversion. (#8082)
- f745d55e Fix upload dialog staying open for small files in modern UI (#8127)
- 73d66da3 Restrict domainid selection to loopback connections (#8132)
- 03502ab6 add fullscreen browser mode to ui #8108
- 4ca56d40 fix(meshctrl): give runcommand its own responseid, stop --reply cross-talk on concurrent calls (#8080)
- 6f47260a Multiple fixes in handlebars and validation of input (#8088)
- b549ff8c Fix mouse position when the desktop view is rotated (#8089)
- fd4a96fb Max invalid login  - blocking types: iprange, ip, username (#8114)
- 95bf7e4f Fix screen frames dropped when jumbo packets are padded (#8099)
- 3a05e83b Fix bulk user group delete dialog closing prematurely (#8106)
- c9db0a39 Fix theme pack static file path resolution (#8110)
- c4bc6fd3 Fix opening URLs and files on the user's Linux desktop (#8103)
- 31618e90 Fix phantom click on mobile desktop connect (#8104)
- 8a63537d Restrict device share cookies on control sessions (#8111)
- e00ac7bd Fix: Add bash detection on BSD and add PATH for freebsd (#8121)

Related Repositories