CloudBeaver Enterprise 26.2

September 8, 2026

Changes since 26.1:

• Administration:
  • Added Keycloak OpenID, which allows users to sign in to CloudBeaver with their Keycloak accounts through OpenID Connect (OIDC).
  • Added support for Google Secret Management with the ability to use preconfigured cloud credentials, default credentials, or a key file.
  • Added support for Azure Key Vault Secret Management with the ability to use preconfigured cloud credentials, default credentials, client certificate, or a key file.
  • Added the ability to export the users list into a .csv file from the Administration panel.
  • Added the Last Login time to the user form and the user table in the administration part.
  • Added the database version and the driver version to diagnostic logs.
  • Fixed the issue of fetching groups during LDAP authorization. CloudBeaver now provides all matched groups regardless of fetching errors.
  • Fixed data filtering in Query History and Query Manager for CloudBeaver applications that use SQL Server as the internal database.
  • Prevented administrators from changing their own roles for multi-server licenses. Users maintain their administrative access without the risk of accidental lockouts.
• Authentication:
  • Added Network profiles to reuse a single configuration across multiple connections. Profiles can be configured on the global level in the Administration panel, on the project level from the project context menu, or on the connection page.
  • Added the option to upload files for certificates and keys in the SSL authorization configuration.
  • Fixed an issue that caused the application to lose its connection to the database after extended uptime. Access is kept automatically during long-running sessions. 
  • Fixed SAML authentication in the application for deployments that use a custom root URI parameter.
• AI Assistant:
  • Added the ability to use multiple AI configurations for working with the AI chat. Administrators can define tokens, engines, and models for OpenAI and Copilot in the Administration panel, separately for each AI profile. After that, users can switch between these profiles while using AI features.
  • Added the ability to refresh the list of models for AI engines. Administrators can use the Refresh button and an API token to fetch the latest options, or manually enter the model name.
  • The “Endpoint” setting was renamed to “API Base URL” for the OpenAI provider.
  • Added the ability to use a custom base URL for Anthropic Claude profile settings.
  • Added to Preferences a capability to set the maximum waiting time for AI responses.
  • Added AI engine icons to AI configuration profiles, making it easier to identify AI providers in the Administration panel and AI Chat configuration.
  • The Ollama engine is now available for use with AI tools.
  • Added an AI Chat button to the main toolbar for quick access.
  • Added the ability to cancel a response in the AI Chat to stop response generation when needed.
  • Added auto-resizing for the AI Chat input field to improve multi-line prompt editing.
  • Added a warning about AI mistakes in the AI chat.
  • Added support for Grok AI assistant.
• SQL Editor:
  • Execution plan diagrams in SQL Editor now use line thickness to visualize the number of rows flowing between operations: the thicker the line, the higher the row count.
  • Added an Export button for the SQL Execution Plan, allowing users to export the graph plan in SVG or PNG formats.
  • Fixed the issue with saving the graph execution plan state when switching tabs. Previously configured changes will now remain intact. 
  • SQL comments are preserved on switching between Visual Query Builder and SQL Editor. 
  • Improved SQL autocomplete suggestion ordering for object names. Now suggestions are sorted alphabetically.
• Data Editor:
  • Added the References panel to the Data Editor. The panel displays related records from connected tables. Users can explore table relationships directly.
  • Added the ability to export generated SQL to a .sql file from the Generate SQL dialog.
  • Fixed copying of large JSON values in the Data Editor – now the full value can be copied.
  • Resolved an issue where the Data Editor ignored the text preview’s maximum length quota. Increasing this quota now enables editing of large values.
  • Added clearer aggregation function names for chart measures.
• Accessibility:
  • Keyboard navigation has been added to the Log Viewer. Arrow keys allow navigation forward and backward through nodes, while the Enter and Space keys can open the log for a specific error.
  • Improved accessibility for the search on the Users section in the Administration panel. The application allows focusing on the search field with the Tab key.
  • Added a loader to the Save button in the Administration panel to improve the indication of the long-running operations. 
  • Improved drag-and-drop in the Navigator Tree for objects by enlarging the auto-scroll trigger areas.
  • Added the ability to expand and collapse code block elements, including JSON, using the keyboard in the Data Editor.
  • Fixed shortcuts behavior for AZERTY keyboards. Now shortcuts like Ctrl/Cmd + Z work correctly.
  • Added the ability to use the Enter or space keys to turn checkboxes on/off in the connection properties tab.
  • Added the ability to copy the folder URI directly from the Cloud Storage tree using the context menu.
• Data Transfer:
  • Added advanced data import settings, including database-specific replace methods, transaction support, bulk loading, and the option to use a separate connection for data import.
  • Improved memory usage when importing large CSV files to improve the application performance.
• Miscellaneous:
  • Added connection types to visually distinguish database connections using background colors across the Database Navigator and application UI.
  • Added a Project Info tab containing the project description to the project context menu.
  • Added a Reset Filters button to the Query Manager and Query History panels to restore the default filter settings in one click.
  • Resolved the issue where the reverse proxy logout opened a pop-up window rather than redirecting to the same tab.
  • Fixed synchronization between devices. Users see updated connections and folders in other devices without manual refreshes.
• Databases and drivers:
  • Added support for the Timeplus database.
  • Added support for the Apache Doris database.
  • Added support for the GreptimeDB database.
  • DDL Driver: Added the ability to create data sources from DDL scripts to inspect and analyze database structure.
  • Altibase: Added support for the JSON data type in Altibase 8.1.
  • BigQuery:
    • The official BigQuery driver is now used by default, and the previous Simba driver was renamed to BigQuery (Legacy).
    • Fixed the ability to edit data in the Data Editor in the session mode.
  • ClickHouse
    • The driver was updated to version 0.10.0.
    • Improved JSON display in the Value panel.
    • Added support for the Map data type visualization for the Data Editor.
  • The Couchbase driver was updated to version 3.12.1.
  • CUBRID: Added Table Triggers and User Triggers nodes to the Navigator tree.
  • Databend:
    • The driver was updated to version 0.4.8.
    • Added support for SSL authentication.
  • Databricks: Improved display of ARRAY and STRUCT values by showing complex arrays as JSON.
  • DocumentDB: Fixed user display in the Users tab: users from the admin database are now shown as global users, while system users are hidden.
  • EDB: Fixed an issue where package bodies were not displayed in the DDL view.
  • GaussDB: Materialized views are now available in the Navigator tree.
  • GBase 8s: Fixed editing CLOB values in the Data Editor.
  • Greenplum: Fixed an out-of-memory error when loading the table list for schemas with resource groups enabled.
  • LibSQL: Added support for database views.
  • MySQL: Fixed support for comments starting with ‘#’ symbol in the SQL Editor.
  • Netezza: Fixed NCHAR length generation in DDL and improved recognition of NCHAR and NVARCHAR data types.
  • PostgreSQL
    • Updated the driver to version 42.7.13.
    • Added a Show full DDL option for schemas and tables to generate complete DDL, including objects within a schema and object comments and privileges.
    • Fixed an error that occurred when applying filters to database nodes.
    • Fixed generated calls for procedures with OUT parameters.
  • The Elasticsearch driver now requires library downloads.
  • MongoDB:
    • The driver was updated to version 5.7.0.
    • Fixed data sorting by column for tables in the Data Editor.
  • Starrocks driver was updated to version 1.1.2.
  • Redshift:
    • Schemas are now visible only to users with the USAGE privilege or higher.
    • Improved performance for queries with many columns by reducing unnecessary metadata calls during result set loading.
  • Yugabyte CQL: Fixed the connection with the default Send buffer size setting.
  • Updated SSL configuration for Cassandra and Redis: SSL fields now dynamically display based on the selected connection method (Certificates or Keystore).
• Security:
  • Added new preferences limiting API tokens’ lifetimes (apiTokenMaxTtlMinutes) to runtime configuration (.cloudbeaver.runtime.conf) with a default limit of 30 days. These changes will not be applied to old API tokens with a longer lifetime setting.
  • Removed the capability to create a user’s API token with an unlimited lifetime and added a data picker to the token creation form to set the limit.
  • Added a new “Auto-create users” setting for the reverse proxy provider, allowing new user creation on login. It is enabled by default.
  • Enforced immediate session termination upon API token deletion to prevent continued access with deleted or compromised credentials.
  • Removed the ability to rename SQL scripts that start with dots to prevent them from being moved outside the Scripts directory into the root Tree.
  • Fixed a security flaw allowing unauthorized users to test database connections. The application now requires proper permissions for this action to prevent malicious requests and protect server files.
  • Fixed a security flaw in the LDAP authentication process.
  • Fixed a cross-site scripting vulnerability caused by unsanitized user input in the web interface.
  • Resolved a security flaw related to user-controlled file paths by adding strict validation to prevent unauthorized resource access.
  • Updated session handling to prevent session fixation vulnerabilities.
  • Restricted reverse proxy authentication headers in the server configuration to prevent header spoofing. 
• Fixed third-party vulnerabilities:
  • Fixed the critical vulnerability (CVE-2026-59873) in the tar library. The library was updated to version 7.5.22.
  • Fixed the critical vulnerability (CVE-2026-9277) in the shell-quote library (updated to version 1.9.0)
  • Fixed the critical vulnerability (CVE-2026-75595) in the netty-handler library. The netty-bom library was updated to version 4.2.17
  • Fixed the high vulnerability (CVE-2026-10050) in the jetty-security library. The library was updated to version 12.1.11.
  • Fixed the high vulnerability (GHSA-r28c-9q8g-f849) in the postcss library. The library was updated to version 8.5.18.
  • Fixed the high vulnerability (GHSA-pm4m-ph32-ghv5) in the js-yaml library. The library was updated to version 5.2.2.
  • Fixed the high vulnerability (CVE-2026-59880) in the immutable library. The library was updated to version 5.1.8.
  • Fixed the high vulnerability (CVE-2026-59879) in the fast-uri library. The library was updated to version 3.1.3.
  • Fixed the high vulnerability (GHSA-gcfj-64vw-6mp9) in the axios library. The library was updated to version 1.18.0.
  • Fixed the high vulnerability (CVE-2026-67213) in the nanoid library. The library was updated to version 3.3.17.
  • Fixed the high vulnerability (CVE-2025-71329) in the less library. The library was updated to version 4.7.0.
  • Fixed the high vulnerability (CVE-2026-13697) in the undici library. The library was updated to version 8.9.0.
  • Fixed the high vulnerability (CVE-2026-18446) in the fast-uri library. The library was updated to version 4.1.2.
  • Fixed the high vulnerability (CVE-2026-69152) in the brace-expansion library. The library was updated to version 5.0.9.
  • Fixed the high vulnerability (GHSA-gv7w-rqvm-qjhr) in the esbuild library. The library was updated to version 0.28.1.
  • Fixed the high vulnerability (CVE-2026-12143) in the form-data library. The library was updated to version 4.0.6.
  • Fixed the high vulnerability (CVE-2026-55760) in the com.github.jknack:handlebars library. The library was updated to version 4.5.2.
  • Fixed the high vulnerability (CVE-2026-45292) in the opentelemetry-api library. The library was updated to version 1.63.0.