v2026.09.08 v2026.09.09

medium risk

vadimdemedes/inkSep 8, 2026 → Sep 8, 20261 day between releases

What's New

Added Smokescreen egress proxy to block agents from reaching internal addresses

New Features

  • Added Smokescreen egress proxy to block agents from reaching internal addresses
  • Added timeout and size limits for Scenario imports by URL
  • Added random admin password generation for Docker images

Improvements

  • Agents now honor the `http_proxy` environment variable
  • Scenario imports by URL follow redirects and report fetch failures as validation errors

Upgrade Notes

Agents now honor the `http_proxy` environment variable. Docker images generate random secrets instead of shipping fixed ones. Scenario imports by URL now have timeout and size limits.

The Two Releases

v2026.09.08

v2026.09.08

Sep 8, 2026· 1 month ago

A critical security release addressing HTML injection, unauthorized file reading, and cross-origin request vulnerabilities, alongside hardening deployment defaults.

Full release notes
v2026.09.09

v2026.09.09

Sep 8, 2026· 1 month ago

A major release adding an egress proxy feature to prevent agents from accessing internal addresses and hardening deployment defaults by removing fixed secrets.

Full release notes