10.7.0 1.2.6

high risk

tulir/whatsmeowSep 23, 2026 → Sep 24, 20260 days between releases

What's New

Security enhancements and MongoDB optimizations introduced in version 1.2.6.

Breaking Changes

  • Restricted new agent enrollment by source address/IP may require configuration updates
  • Enforced No-Files permission on device file download endpoint

New Features

  • Per-device rights enforcement
  • Agent signature verification
  • Fullscreen browser mode
  • Raspberry Pi bios_vendor detection
  • MongoDB optimization

Improvements

  • Optimized MongoDB queries to prevent COLLSCANs and index resets
  • Fixed keyboard input issues after desktop reconnect
  • Fixed Right Shift key functionality on Windows agents

Bug Fixes

  • Fixed keyboard input issues after desktop reconnect
  • Fixed Right Shift key functionality on Windows agents
  • Fixed timestamp parsing for 12/24-hour formats
  • Sanitized filenames for upload temp targets
  • Fixed crash frames parsing for PIE binaries

Upgrade Notes

Administrators should verify that IP restrictions for new agent enrollment do not block legitimate connections. The enforcement of No-Files permissions on the download endpoint may require updates to client-side workflows.

The Two Releases

10.7.0

10.7.0

Sep 23, 2026· 29 days ago

This release adds methods for isolated group handling and custom shape bounds, along with bug fixes for image smoothing and the removal of size-limit checks.

Full release notes
1.2.6

1.2.6

Sep 24, 2026· 28 days ago

Focuses on agent security, stability, and UI improvements, including per-device rights enforcement, MongoDB optimization, and fixes for keyboard and mouse input issues.

Full release notes