Agent Controller 1.32.3541 includes security hardening for the container image that reduces its attack surface and strengthens supply chain integrity. The image now ships with a bundled software bill of materials for greater transparency into its contents.
MCP Identity Gateway now binds each session ID to the authenticated user, closing a privilege-escalation gap where one user’s session could carry over to another identity.
This change requires no configuration. It ships in MCP Identity Gateway 1.32.5098, alongside the workload event correlation and platform fixes in this build; see the event correlation and platform fixes entry.
A security update for Agent Proxy resolves a vulnerability in a bundled DNS library.
This fix shipped in the same build as the Edge components release with reliability, CLI, and MCP enhancements, across the Agent Proxy container, virtual machine package, and AWS Lambda deployments.
Aembit has released new versions of the following components and packages:
For the latest available versions of these components, see the Edge Components Supported Versions page.
Key Updates:
Aembit now cryptographically signs all container images in Aembit’s Docker Hub repositories. See Verifying Aembit container image signatures for more details and how to verify Aembit container images.
Aembit has released a new version of Agent Controller, version 1.23.2160, with the following changes:
Security enhancements for Kerberos and Aembit-managed PKI.
Added the AEMBIT_HTTP_PORT_DISABLED environment variable to enable you to disable Agent Controller’s HTTP port.
Updated Edge Components:
Updated Edge Packages:
Helm Chart 1.23
Terraform ECS module 1.23
See Edge Components supported versions for more details.