v1.0.150 v1.0.3
iOfficeAI/OfficeCLISep 14, 2026 → Sep 15, 20261 day between releases
What's New
Upgraded Next.js to patch RCE and added server-side asset lifecycle management.
Breaking Changes
- POST /api/classroom no longer honors client-supplied stage.id
- CGNAT addresses are blocked by default; requires ALLOW_LOCAL_NETWORKS=true
New Features
- Server-side asset lifecycle management
- Inquiry-based teaching skill
Improvements
- Patched critical RCE in Next.js (16.2.11 to 16.3.3)
- Fixed access code token expiration and verification throttling
Bug Fixes
- Sanitized untrusted HTML in render service
Upgrade Notes
Update your API calls to POST /api/classroom as they no longer accept stage.id. You may need to set ALLOW_LOCAL_NETWORKS=true if your infrastructure uses CGNAT or Tailscale.
The Two Releases
v1.0.150
Sep 14, 2026· 1 month ago
This release focuses on a bug fix for PowerPoint generation, specifically addressing the scaling of speaker notes to ensure they align correctly with the slides.
Full release notesOpenMAIC v1.0.3 — Security
Sep 15, 2026· 1 month ago
A security release from September 15, 2026, that upgrades Next.js and patches critical vulnerabilities in access codes, HTML rendering, and audio providers while adding storage lifecycle features.
Full release notes