Version 2026.2.1.0 (June 2, 2026)

IMPROVEMENTS

• [Entry] - Added a new entry type for storing Public Domain Name Registrar information
• [PAM] - Added a pending checkout icon in the tree view to make pending accounts easier to identify
• [PAM] - Added optional multi-factor authentication (MFA) on checkout
• [PAM] - Changed the Enable Password Field control on PAM accounts from plain text to a proper button
• [PAM] - Restored the loading indicator that displays while a heartbeat is running
• [PowerShell] - Updated the Hub client package in the PowerShell module so users can now disable and configure Force SSO through scripting
• [Session] - Added the ability to prompt for a VPN/SSH/Gateway connection at session launch

FIXES

• [Dashboard] - Fixed long custom widget names overflowing their container in the web client
• [Dashboard] - Fixed missing outline around movable widgets when editing the dashboard in light theme so frames now appear consistently across all themes
• [Entry] - Fixed an Invalid data error when editing an existing attachment on an entry
• [Entry] - Fixed an issue preventing website entries from being updated when their name contained characters that are actually valid
• [Entry] - Fixed inconsistent logo sizing in the Brandfetch image selection so logos display at a uniform size
• [PAM] - Fixed a regression causing password reset and heartbeat checks to time out when the server and PAM Service used mismatched subdomain configurations
• [PAM] - Fixed a regression where automatic check-in was no longer performed by the PAM Service at the end of a checkout
• [PAM] - Fixed an invalid data error when saving a custom heartbeat or password rotation schedule with a frequency exceeding 60 minutes or 24 hours
• [PAM] - Fixed the global Password policy mode setting not being saved
• [PAM] - Fixed the JIT default group field showing a perpetual loading state in production where the feature is not supported
• [Password Management] - Fixed the Update button remaining greyed out when modifying a password policy
• [Reports] - Fixed the Provisioning Logs page failing to load with an Invalid data error and returning no results
• [Security] - Fixed an issue in the IP Allowlist where a single IP could not be added alongside the user's own IP
• [UI] - Fixed color and visual inconsistencies
• [User Management] - Fixed an infinite loading spinner that prevented non-admin users with delegated permissions from managing users and invitations
• [User Management] - Fixed non-admin users intermittently receiving an Access Denied prompt when accessing the Administration tab
• [User Management] - Fixed the Delete and Reinvite buttons not appearing for certain users
• [User Management] - Fixed the disabled Send invite button on the License step of the Invite Users wizard so invitations can be completed
• [Vault] - Fixed an issue where the Default Vault setting would not stick when toggled
• [Web Sessions] - Fixed several session close lifecycle issues for RDP, VNC, and ARD desktop web sessions
• [Web Sessions] - Fixed VNC and ARD web sessions becoming stuck on a frozen frame when a gateway or server connection was abruptly terminated