Skip to content
ReleasesGitHub

Edge Component Supported Versions

Aembit Edge Components and packages are frequently updated with feature enhancements, bug fixes, and additional functionality.

The compatibility matrices shown on this page list the supported versions for:

Aembit Edge Components

Aembit packages

Supported Edge Components versions

Section titled “Supported Edge Components versions”

The following matrices list the Edge Component versions that Aembit supports along with their release dates.

Agent Proxy

Section titled “Agent Proxy”
Agent Proxy VersionRelease DatePlatformsNotes
1.34.57558/27/2026Linux (amd64)
Windows (amd64)		Honor the gRPC keep-alive properties in the Windows installer; add the authorization chain to workload events; keep the outcome fields on Aembit-generated response events; validate arguments in the Linux installer
1.32.49996/4/2026Linux (amd64)
Windows (amd64)		Add gRPC keep-alive and HTTP/2 ping options, with keep-alive settings in the Linux and Windows installers; add the HTTP idle timeout setting to the Windows installer; add a private key rotation period for x509 credentials; resolve all directive variables in a single GetCredentials call; restore AGENT_TRUST_PATH; handle dmidecode errors when gathering the serial number; include the error body when a server connection fails
1.31.47985/21/2026Linux (amd64)
Windows (amd64)		Add support for x509/mTLS client credential injection
1.31.47645/2/2026Linux (amd64)
Windows (amd64)		Remove S3 upload size restriction; add support for gathering dynamic claims from environment variables
1.31.46704/17/2026Linux (amd64)
Windows (amd64)		Add upstream HTTP proxy support
1.30.44333/11/2026Linux (amd64)
Windows (amd64)		Apply stability improvements for S3 uploads and downloads
1.29.42982/26/2026Linux (amd64)
Windows (amd64)		Extend Oracle protocol support with username injection for thick and thin clients and Oracle events; add the command line to process assessments; cache process assessments with a file hash cache; skip the TCP connection handler when process identification is disabled; add logging for process assessments
1.28.40631/16/2026Linux (amd64)
Windows (amd64)		Add initial Oracle database protocol support with O5LOGON authentication; add eBPF-based network request logging; compute payload signatures on streaming bodies; redact OIDC tokens in logs; fix Lambda pause detection activating when it should not; share the conntrack netlink connection across assessments
1.27.386512/4/2025Linux (amd64)
Windows (amd64)		Support multiple AWS STS Credential Providers in a single Access Policy via Access Key ID mapping
1.26.363910/21/2025Linux (amd64)
Windows (amd64)		Gather Kubernetes environment variable assessments only on Kubernetes; reduce CPU use when sending events; set permissions on parent directories in the VM installer; apply base image security updates
1.25.360010/2/2025Linux (amd64)
Windows (amd64)		Apply a security fix to the container base-images
1.25.34948/22/2025Linux (amd64)
Windows (amd64)		Add support for the generic OIDC Trust Provider; download the tenant root CA certificate at startup; collect additional network interface information in assessments; determine User-Agent strings at runtime; remove the cloud location override; reject 0 for certain startup arguments
1.24.33247/22/2025Linux (amd64)
Windows (amd64)		Add an in-proxy network diagnostic tool; add raw IP address support; standardize timing environment variables on a _SECS suffix; make the container start script honor AEMBIT_LOG_LEVEL; remove the process command line assessment; fix a token expiration threshold bug; fix the VM installer setting steering hosts twice
1.23.30025/26/2025Linux (amd64)
Windows (amd64)		Fetch STS data only on ECS and Lambda; omit the tenant root CA certificate when loading the bundle; report the build version to Aembit Cloud
1.22.29054/21/2025Linux (amd64)
Windows (amd64)		Validate JWT signatures and issuers, with trusted issuers as a startup argument; use the original destination when connecting; fix explicit steering host matching; patch base image vulnerabilities
1.21.27894/3/2025Linux (amd64)
Windows (amd64)		Add Kerberos and Prometheus support to the Windows installer; upgrade AWS configuration handling
1.21.27143/5/2025Linux (amd64)Fix an error when calculating the expiration time of an empty certificate
1.21.26963/3/2025Linux (amd64)
Windows (amd64)		Add AWS SigV4A signing; remove the KMS constraint from AWS SigV4 signatures; fix the immediate termination shutdown strategy
1.21.26702/20/2025Linux (amd64)
Windows (amd64)		Add Vault login support
1.20.25591/28/2025Windows (amd64)Initial Windows Server release of Agent Proxy
1.19.243912/26/2024Linux (amd64)Add SELinux support to the VM installer with RHEL rulesets; add a Windows build with host assessments and an MSI installer; fix constant reloading of native certificates; fix a DNS resolution race; add an option to disable the directive cache; log startup arguments
1.18.226510/29/2024Linux (amd64)
1.18.226210/22/2024Linux (amd64)Remove the expiration on the VM service user; rename the steering methods; exclude the AWS instance metadata address from steering rules
1.17.225510/8/2024Linux (amd64)Add Prometheus metrics for connections, credential injection, process statistics, and control plane status, with a port override and an option to disable the endpoint; gather only the assessments that apply to the deployment model
1.17.21699/17/2024Linux (amd64)Add a rolling network trace; add the virtual appliance deployment model; enforce TLS in the container start script and add TLS debug logging; add metrics plumbing
1.17.21559/5/2024Linux (amd64)Add an HTTP idle timeout; consolidate token refresh handling
1.16.21398/27/2024Linux (amd64)Collect information for multiple Credential Providers; shut down on errors in critical tasks; fix HTTP data collection on requests without a JSON body; update the log level environment variable
1.15.20937/3/2024Linux (amd64)Steer only specific traffic to Agent Proxy, including Docker containers, with custom steering; add an edge monitor script; add a registration timeout; replace AEMBIT_AGENT_VM_INSTALL with AEMBIT_AGENT_PROXY_DEPLOYMENT_MODEL; fix root certificates loading twice at boot
1.14.19806/19/2024Linux (amd64)
1.14.19595/30/2024Linux (amd64)Raise the open files limit on VM installs; remove OpenSSL usage; lower the log level when STS environment variables are missing
1.14.19135/14/2024Linux (amd64)Add AWS Role Trust Provider support for EC2; do TCP passthrough over HTTP when TLS Decrypt is not set; add the resource set ID; fix a Lambda event-flush race; install the journald namespace config only on systemd newer than 245
1.13.18514/19/2024Linux (amd64)Serve health data on the health endpoint separately from the service server; add the Lambda ARN Client Workload identifier with paused-container checks; add CNAME support; flush events on immediate termination; statically link the binaries against musl
1.13.18184/8/2024Linux (amd64)Listen on all local addresses for DNS proxying; add protocol identification; add a health port
1.12.16993/12/2024Linux (amd64)Terminate immediately on SIGTERM; merge the iptables and firewalld rule scripts; fix Kerberos calls over TLS; allow upgrades without redefining environment variables; lower the log level of routine messages
1.12.16212/29/2024Linux (amd64)Add Kerberos attestation through Agent Controller with keytab and TGT support in the VM installer; fix DNS messages larger than 512 bytes failing to resolve; allow an https Agent Controller address in the installer; cache Kerberos assessments
1.11.15512/8/2024Linux (amd64)Resolve multiple credentials in one request; make the HTTP server port configurable; add firewalld support to the VM installer; check for the iptables dependency at install; build against an older glibc; add the Server Workload to TCP passthrough events; add a timeout when fetching tokens from Agent Controller
1.10.14411/4/2024Linux (amd64)Validate process identification with conntrack events; fetch Redis credentials just in time; add TTL information when caching credentials; add a backoff interval for command queue polling
1.10.141512/7/2023Linux (amd64)Add Azure attestation support; add the system serial number and endpoint security agent data to assessments; add a sudoers file and harden file permissions in the VM installer; bundle AWS certificates in the container; include a message in events when directive retrieval fails
1.9.133711/8/2023Linux (amd64)

Agent Controller

Section titled “Agent Controller”
Agent Controller VersionRelease DatePlatformsNotes
1.32.35417/8/2026Linux (amd64)
Windows (amd64)		Harden the container image and add an embedded SBOM
1.32.35026/4/2026Linux (amd64)
Windows (amd64)		Add fallback health reporting when a proxy blocks the command stream; reconnect the gRPC channel automatically after network or proxy drops; fix TLS certificate renewal stalling on Kubernetes after a file-write error; stop retrying dropped command streams with expired tokens
1.30.33844/15/2026Linux (amd64)
Windows (amd64)		Add support for HTTP proxy environment variables
1.30.33363/11/2026Linux (amd64)
Windows (amd64)		Improve compatibility across Kubernetes platforms including Red Hat OpenShift (ROSA)
1.29.32392/26/2026Linux (amd64)
Windows (amd64)		Stay registered when access token renewal with a refresh token fails; default the log level to Info; batch Kubernetes Secret token updates into a single patch; disable the Prometheus TLS endpoint on Kubernetes; upgrade to .NET 10 and sign container images with cosign
1.27.290611/25/2025Linux (amd64)
Windows (amd64)		Apply bug fixes and logging improvements
1.25.26229/9/2025Linux (amd64)
Windows (amd64)		Deprecate AEMBIT_HTTP_PORT_DISABLED with a warning log; remove HSTS middleware; speed up startup attestation on EKS Fargate and fix ECS Fargate credential handling
1.24.24857/29/2025Linux (amd64)
Windows (amd64)		Sign the container image with cosign; bind TLS ports when metrics and HTTP are both disabled; close the Prometheus HTTP port when customer-managed TLS is enabled; log AEMBIT_HTTP_PORT_DISABLED at startup; apply a security hardening fix
1.23.22636/11/2025Linux (amd64)
Windows (amd64)		Log environment variables at startup; add logging for TLS certificate retrieval from Aembit Cloud; unify reporting of Aembit-managed and customer-managed TLS certificates to Aembit Cloud
1.23.21606/2/2025Linux (amd64)
Windows (amd64)		Add customer-managed TLS support to the Linux installer; add AEMBIT_HTTP_PORT_DISABLED to the Windows installer and default its log level to warning; fix Windows upgrades that specify a different service user; listen only on the TLS port on VMs when TLS is enabled
1.21.21014/4/2025Windows (amd64)Windows only
1.21.19142/27/2025Linux (amd64)Serve the full CA chain when TLS is enabled; fix unhealthy health status on ECS; fix log file access in HA configurations; upgrade to .NET 9
1.19.175212/26/2024Linux (amd64)Add SELinux support to the VM installer; report health status to Aembit Cloud on connect and disconnect; add standardized log levels including trace; log lifecycle changes and tasks; quiet exceptions during Trust Provider registration
1.18.160210/22/2024Linux (amd64)Fix the VM installer creating a service account that could expire; handle an HTTP protocol exception in the cloud connection
1.17.157910/8/2024Linux (amd64)Make the log level configurable on Kubernetes; remove deprecated environment variables
1.17.15339/30/2024Linux (amd64)Add Prometheus metrics collection with a setting to enable or disable it
1.17.15189/17/2024Linux (amd64)Report health to Aembit Cloud and receive commands over a persistent connection; add Aembit-managed TLS certificates for Agent Proxy with automatic reload and renewal; fix Healthy status while the cloud connection is down; fail early when neither device code nor Trust Provider is configured; upgrade to .NET 8
1.16.13417/29/2024Linux (amd64)ECS Only
1.14.10745/10/2024Linux (amd64)Fix an overnight crash loop; fix missing actor and user agent in audit log entries for attestation and registration; support reinstalling without TLS after a TLS install; skip the journald namespace config on systemd older than 245
1.12.9743/20/2024Linux (amd64)Renew the Kerberos attestation certificate in the background; send TLS certificate metadata to Aembit Cloud; refuse Kerberos attestation documents when the certificate has expired
1.12.9273/12/2024Linux (amd64)Add configurable AEMBIT_LOG_LEVEL; fix the service showing failed after stop on Red Hat; log when registration token retrieval for Agent Proxy fails; validate the Kerberos attestation installer variable
1.12.8782/29/2024Linux (amd64)Add an HTTPS endpoint on port 5443 with a VM installer option and Kubernetes TLS Secret support for the certificate; add Kerberos attestation signing for Agent Proxy; return the agent access token in Registered state instead of 503
1.11.7421/23/2024Linux (amd64)Change status to Unregistered when authentication starts failing; handle switching from device code to Trust Provider authentication; support RHEL 8.6
1.9.69611/13/2023Linux (amd64)

Agent Injector

Section titled “Agent Injector”
Agent Injector VersionRelease DateNotes
1.34.4338/27/2026Move to a newer Debian base image; fix RUSTSEC-2026-0185 in quinn-proto
1.31.4255/2/2026Apply security upgrades and bug fixes
1.29.3942/26/2026
1.26.35310/21/2025
1.25.32910/2/2025Apply a security fix to the container base-images
1.23.2955/30/2025
1.18.25910/23/2024
1.17.23410/8/2024
1.17.1989/20/2024
1.14.1905/30/2024
1.14.1824/30/2024
1.9.14210/16/2023
1.8.1379/27/2023

Aembit CLI

Section titled “Aembit CLI”
Aembit CLI VersionRelease DatePlatformsNotes
1.34.57728/27/2026Linux (amd64, arm64)
Windows (amd64)		Add a glibc-linked Linux amd64 archive alongside the default musl build
1.32.49996/4/2026Linux (amd64, arm64)
Windows (amd64)		Add AWS (instance metadata or IAM role) and Kubernetes Trust Provider authentication to credentials get alongside OIDC tokens; add X.509 certificate retrieval for the X.509-SVID Credential Provider through a new client private-key option; add HTTP/2 keepalive options
1.31.47645/2/2026Linux (amd64, arm64)
Windows (amd64)		Add upstream HTTP proxy support; add --client-workload-id flag and OIDC token expiration validation; add support for gathering dynamic claims from environment variables
1.31.46704/17/2026Linux (amd64, arm64)
Windows (amd64)		Add upstream HTTP proxy support for Aembit Cloud and Server Workload traffic
1.30.44333/11/2026Linux (amd64, arm64)
Windows (amd64)		No CLI code changes; build pipeline and artifact signing updates only
1.29.42982/26/2026Linux (amd64, arm64)
Windows (amd64)		Internal changes to process identification and assessment caching shared with Agent Proxy; no CLI-visible change
1.28.40631/16/2026Linux (amd64, arm64)
Windows (amd64)		Internal changes shared with Agent Proxy; no CLI-visible change
1.27.386512/4/2025Linux (amd64, arm64)
Windows (amd64)		Extend attestation gathering with VMware network attestation and Client Workload binary hashing; dependency updates
1.26.363910/21/2025Linux (amd64, arm64)
Windows (amd64)		Toolchain and dependency cleanup
1.25.360010/2/2025Linux (amd64, arm64)
Windows (amd64)		No CLI code changes; rebuilt with updated base image and dependencies
1.25.34948/22/2025Linux (amd64, arm64)
Windows (amd64)		Print help when run with no subcommand; add the sh environment-variable output format; clearer error messages when an OIDC token is missing or credential retrieval fails
1.24.33287/29/2025Linux (amd64, arm64)
Windows (amd64)
1.17.09/18/2024Linux (amd64, arm64)
1.13.03/27/2024Linux (amd64, arm64)

Aembit Secrets Operator

Section titled “Aembit Secrets Operator”
Aembit Secrets Operator VersionRelease DatePlatformsNotes
1.34.3588/31/2026Linux (amd64, arm64)Add X.509-SVID Credential Provider support
1.32.3226/12/2026Linux (amd64, arm64)Add support for the remaining Aembit Credential Providers
1.31.3145/15/2026Linux (amd64, arm64)Graduate CRDs from aembit.io/v1beta1 to aembit.io/v1
1.31.2985/12/2026Linux (amd64, arm64)Initial release

Init sidecar container

Section titled “Init sidecar container”
Init sidecar container VersionRelease DateNotes
1.34.1388/27/2026Move to a newer Debian base image
1.25.13010/2/2025Apply a security fix to the container base-images
1.25.1278/22/2025
1.18.921/14/2025
1.14.865/30/2024
1.13.774/19/2024
1.8.439/27/2023
1.7.378/14/2023
1.0.302/10/2023

MCP Identity Gateway

Section titled “MCP Identity Gateway”
MCP Identity Gateway VersionRelease DatePlatformsNotes
1.34.57949/15/2026Linux (amd64, arm64)MCP Tool Access Control enforcement and security updates
1.34.57338/18/2026Linux (amd64)Configurable fanout timeouts and nine new Prometheus metrics
1.33.56548/7/2026Linux (amd64)Broader Content Security inspection coverage and a single workload event per inspection decision
1.33.55477/28/2026Linux (amd64)Separate liveness and readiness health endpoints and upstream reconnection improvements
1.32.50986/30/2026Linux (amd64)Workload event correlation with Client Workload and Server Workload identity in events, session IDs bound to the authenticated user, and optional session persistence across restarts
1.32.50066/4/2026Linux (amd64)MCP protocol ping support and full authorization chain in workload events
1.31.49555/19/2026Linux (amd64)Session deletion, MCP-level error metrics, and application-specific Prometheus metrics
1.30.45494/3/2026Linux (amd64)Auth-first enforcement, tool annotations, metrics endpoint, session management improvements, and Claude compatibility fixes
1.30.45423/26/2026Linux (amd64)Route tools/call after a gateway restart for clients that reuse a cached tool list
1.30.45303/25/2026Linux (amd64)Skip resource fanout for MCP servers that do not support resources; omit null _meta values in tool responses for Claude compatibility; add a WWW-Authenticate header with the resource metadata URL to 401 responses
1.29.44193/19/2026Linux (amd64)Add MCP resource support (resources/list and resources/read)
1.28.41361/28/2026Linux (amd64)Initial limited beta release

Supported package versions

Section titled “Supported package versions”

The following matrices list the package versions that Aembit supports along with their release dates.

ECS Terraform

Section titled “ECS Terraform”
ECS Terraform VersionRelease DateNotes
1.34.18/27/2026
1.32.17/8/2026
1.32.06/4/2026
1.31.35/21/2026
1.31.15/2/2026
1.31.04/17/2026Add upstream HTTP proxy support
1.30.03/11/2026
1.28.01/16/2026
1.27.112/4/2025Support multiple AWS STS Credential Providers in a single Access Policy via Access Key ID mapping
1.27.011/25/2025Apply bug fixes and logging improvements
1.26.110/21/2025
1.26.010/2/2025Apply a security fix to the container base-images
1.25.29/9/2025
1.25.18/22/2025
1.24.27/29/2025
1.24.17/22/2025
1.23.46/11/2025
1.23.36/2/2025
1.23.15/26/2025
1.23.05/21/2025
1.22.14/21/2025
1.21.44/3/2025
1.21.33/5/2025
1.21.12/27/2025
1.21.02/20/2025
1.20.012/26/2024
1.17.410/08/2024
1.17.39/30/2024
1.17.19/17/2024
1.17.09/5/2024
1.16.28/27/2024
1.16.08/11/2024
1.15.06/19/2024
1.14.35/30/2024
1.14.25/14/2024
1.14.15/10/2024
1.13.24/19/2024
1.13.14/8/2024
1.13.03/20/2024
1.12.23/12/2024
1.12.12/29/2024
1.12.02/8/2024

Helm chart

Section titled “Helm chart”
Helm chart VersionRelease DateNotes
1.34.5668/27/2026
1.32.5627/8/2026
1.32.5576/4/2026
1.31.5555/21/2026
1.31.5535/2/2026
1.31.5434/17/2026Add upstream HTTP proxy support
1.30.5313/11/2026Improve Helm Chart compatibility across Kubernetes platforms
1.29.5182/26/2026
1.28.5071/16/2026
1.27.50512/4/2025Support multiple AWS STS Credential Providers in a single Access Policy via Access Key ID mapping
1.27.50311/25/2025Apply bug fixes and logging improvements
1.26.50010/21/2025
1.26.49810/2/2025Apply a security fix to the container base-images
1.25.4969/9/2025
1.25.4948/22/2025
1.24.4287/29/2025
1.24.4217/22/2025
1.23.4056/11/2025
1.23.36/2/2025
1.23.4015/30/2025
1.23.3945/26/2025
1.22.3644/21/2025
1.21.3474/3/2025
1.21.3313/5/2025
1.21.3293/3/2025
1.21.3252/27/2025
1.21.3182/20/2025
1.20.3001/14/2025
1.20.29812/26/2024
1.18.29410/29/2024
1.18.29310/23/2024
1.17.28810/11/2024
1.17.28210/08/2024
1.17.2729/30/2024
1.17.2589/20/2024
1.17.2549/17/2024
1.17.2469/5/2024
1.16.2388/11/2024
1.15.2206/19/2024
1.14.2115/30/2024
1.14.2055/14/2024
1.14.2045/10/2024
1.14.1944/30/2024
1.13.1904/19/2024
1.13.1813/19/2024
1.12.1763/12/2024
1.12.1742/29/2024
1.12.1642/9/2024

Aembit Secrets Operator Helm chart

Section titled “Aembit Secrets Operator Helm chart”
Aembit Secrets Operator Helm chart VersionRelease DateNotes
1.34.3588/31/2026Add X.509-SVID Credential Provider support
1.32.3226/12/2026Add support for the remaining Aembit Credential Providers
1.31.3145/15/2026Graduate CRDs from aembit.io/v1beta1 to aembit.io/v1
1.31.2985/12/2026Initial release

Lambda Extension

Section titled “Lambda Extension”
Lambda Extension VersionRelease DateNotes
1.34.1758/27/2026Update the Go version
1.32.1686/4/2026
1.31.1645/21/2026
1.31.1625/2/2026
1.31.1604/17/2026Add upstream HTTP proxy support
1.29.1572/26/2026
1.28.1511/16/2026
1.27.14712/4/2025Support multiple AWS STS Credential Providers in a single Access Policy via Access Key ID mapping
1.26.14310/21/2025
1.26.13910/2/2025Apply a security fix to the container base-images
1.25.1329/2/2025
1.24.1287/22/2025
1.23.1125/26/2025
1.22.744/21/2025
1.21.664/3/2025
1.21.653/5/2025
1.21.643/3/2025
1.21.622/20/2025
1.19.5612/26/2024
1.18.5311/22/2024
1.17.4810/08/2024
1.17.469/17/2024
1.17.459/5/2024
1.16.436/19/2024
1.14.386/19/2024
1.14.375/31/2024
1.14.294/22/2024

Lambda Layer

Section titled “Lambda Layer”
Lambda Layer VersionRelease DateNotes
1.32.1686/4/2026
1.31.1645/21/2026
1.31.1625/2/2026
1.31.1604/17/2026Add upstream HTTP proxy support
1.29.1572/26/2026
1.28.1511/16/2026
1.27.14712/4/2025Support multiple AWS STS Credential Providers in a single Access Policy via Access Key ID mapping
1.26.14310/21/2025
1.26.13910/2/2025Apply a security fix to the container base-images
1.25.1329/2/2025
1.23.1125/26/2025
1.22.1105/6/2025