CIB seven 2.2.2 EE - Release Notes

Release Date: August 7, 2026

Highlights

  • Security 43 CVEs resolved across the platform: Task Filter JUEL expressions can now be restricted to a safe whitelist to prevent arbitrary function/bean invocation via filter expressions (opt-in, disabled by default); postgresql upgraded to 42.7.12 (CVE-2026-54291); jackson upgraded to 2.21.5 and pinned in the run4 distribution and in the Tomcat AI-agent overlay (CVE-2026-59889, CVE-2026-54512, CVE-2026-54513); wildfly upgraded to 41.0.0; netty, openjdk21, curl/libcurl, micrometer, cxf, mssql-jdbc, artemis, and lz4-java (CVE-2026-59949) updated to patched versions; OpenTelemetry Java agent updated to 2.28.1 in Docker images (CVE-2026-54704, CVE-2026-54712)
  • Authorization Fixed a permission gap allowing deletion of a historic process instance by a read-only user, and a system exception when a user without deployment-read permission opened the process definition view
  • BPMN AI Agent (EE exclusive) Fixed the chat WebSocket handshake failing (404) when the webclient is served under a path prefix
  • Modeler (EE exclusive) Fixed ModelerViewEE fetching element templates from the wrong services base path, causing 404s

Bug Fixes

Security

  • Task Filter JUEL expressions (e.g. assigneeExpression) could be evaluated with full JUEL power and no content validation, allowing arbitrary function/method/bean invocation for anyone authorized to create or execute filters. Expressions can now be restricted to a safe whitelist — currentUser(), currentUserGroups(), now(), a whitelisted dateTime() expression, and plain literal text — covering stored filters, adhoc task queries, and or()/endOr() query branches. Operators can extend the whitelist via ProcessEngineConfigurationImpl#additionalAllowedFilterExpressions. Disabled by default; enable via the enableFilterExpressionWhitelist toggle.

Authorization

  • Fixed the “Delete instance” button in the process definition instances table being shown, and deletion being possible, without the required DELETE_HISTORY permission
  • Fixed the process definition view attempting to load deployment info for users without deployment-read permission, causing a system exception

BPMN AI Agent Chat (EE exclusive)

  • Fixed the chat WebSocket endpoint not being registered under the webclient’s application path, causing handshake failures (404) when the webclient is served under a path prefix

Modeler (EE exclusive)

  • Fixed ModelerViewEE fetching element templates from the wrong services base path (services/v1 instead of the app’s configured path), causing 404s

Batch Operations (EE exclusive)

  • Fixed the “correlate message” batch operation matching finished process instances; it now defaults to active instances only

Backend

  • Fixed the LDAP configurable cache introduced in 2.2.1 failing with NoClassDefFoundError because the caffeine library was not shipped in the WildFly and Tomcat distributions

Technical Updates

Dependency Updates

  • Update jackson from 2.21.4 to 2.21.5; pinned in the run4 distribution to fix CVE-2026-59889, and in the Tomcat AI-agent overlay to 2.21.4 to fix CVE-2026-54512/CVE-2026-54513; WildFly 28 Jackson modules updated to 2.22.0; also fixes CVE-2026-54515 and GHSA-mhm7-754m-9p8w
  • Update wildfly from 40.0.1.Final to 41.0.0
  • Update postgresql (JDBC driver) from 42.7.11 to 42.7.12, fixing CVE-2026-54291
  • Update OpenTelemetry Java agent (Docker images) to 2.28.1, fixing CVE-2026-54704 and CVE-2026-54712
  • Update cibseven-modeler to 1.2.0
  • Update cibseven-modeler-ee to 1.2.0 (EE exclusive)
  • Update openjdk21 (openjdk21-jre-headless) from 21.0.11_p10-r0 to 21.0.12_p8-r0 (Alpine base image)
  • Update c-ares from 1.34.6-r0 to 1.34.8-r0 (Alpine base image), fixing CVE-2026-33630
  • Update curl (libcurl) from 8.19.0-r0 to 8.20.0-r0 (Alpine base image)
  • Update lz4-java (at.yawk.lz4:lz4-java) from 1.10.4 to 1.11.1, fixing CVE-2026-59949
  • Update netty (netty-codec-http, netty-codec-http2, netty-codec, netty-codec-dns) from 4.1.135.Final to 4.1.136.Final
  • Update micrometer (io.micrometer:micrometer-core) from 1.16.5 to 1.16.6, fixing CVE-2026-40983 and CVE-2026-40984
  • Update cxf (org.apache.cxf:cxf-core) from 4.0.11 to 4.1.7, fixing CVE-2026-50645
  • Update mssql-jdbc (com.microsoft.sqlserver:mssql-jdbc) to 12.8.2.jre11, fixing CVE-2025-59250
  • Update artemis (org.apache.artemis:artemis-stomp-protocol) from 2.53.0 to 2.54.0, fixing CVE-2026-40914

Resolved CVE Vulnerabilities

High Severity
  • CVE-2025-59250 - Improper input validation in the JDBC Driver for SQL Server allows an unauthorized attacker to perform spoofing over a network. Affects com.microsoft.sqlserver:mssql-jdbc. - CVSS 8.1.
  • CVE-2026-33630 - Vulnerability fixed by upgrading the affected package. Affects c-ares.
  • CVE-2026-40983 - Specially crafted gRPC requests to Micrometer may cause a denial-of-service condition. Affects io.micrometer:micrometer-core. - CVSS 7.5.
  • CVE-2026-40984 - Specially crafted HTTP requests to Micrometer may cause a denial-of-service condition. Affects io.micrometer:micrometer-core. - CVSS 7.5.
  • CVE-2026-41254 - Little CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication. Affects openjdk21-jre-headless. - CVSS 7.5.
  • CVE-2026-47063 - Easily exploitable vulnerability allows an unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. Affects openjdk21-jre-headless. - CVSS 7.5.
  • CVE-2026-50645 - No restriction on the number of attachment headers a message can contain when deserialized by Apache CXF can lead to uncontrolled resource consumption or a denial of service attack. Affects org.apache.cxf:cxf-core. - CVSS 7.5.
  • CVE-2026-54291 - Channel-binding downgrade vulnerability in pgjdbc, allowing an on-path attacker to bypass SCRAM channel binding on the AI agent’s PostgreSQL connector. Affects org.postgresql:postgresql. - CVSS 5.9.
  • CVE-2026-55831 - Netty’s SPDY SETTINGS decoder accepts a peer-declared entry count up to the 24-bit frame-length limit, allowing a remote SPDY/3.1 peer to send an oversized SETTINGS frame that exhausts memory. Affects io.netty:netty-codec-http. - CVSS 7.5.
  • CVE-2026-55833 - Netty SPDY header decoding continues inflating zlib-compressed header blocks after the parser has exceeded maxHeaderSize, letting a small compressed block expand into much larger memory use. Affects io.netty:netty-codec-http. - CVSS 7.5.
  • CVE-2026-56745 - Vulnerability in Netty’s codec-http module, fixed in 4.1.136.Final and 4.2.16.Final. Affects io.netty:netty-codec-http.
  • CVE-2026-56819 - A remote unauthenticated peer can leak one direct ByteBuf per HTTP/2 DATA frame in applications that enable HTTP/2 content decompression via DelegatingDecompressorFrameListener. Affects io.netty:netty-codec-http2. - CVSS 7.5.
  • CVE-2026-5773 - A logical error in the connection reuse mechanism for SMB transfers could lead libcurl to reuse an existing SMB connection with a different share than intended. Affects curl, libcurl. - CVSS 6.5.
  • CVE-2026-59901 - The Bzip2Decoder handler in Netty’s compression codec pipeline is vulnerable to a denial-of-service attack via a malformed bzip2 stream that permanently captures the event-loop thread in an infinite loop. Affects io.netty:netty-codec.
  • CVE-2026-62574 - Easily exploitable vulnerability allows a low-privileged attacker with logon access to the infrastructure to compromise Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. Affects openjdk21-jre-headless. - CVSS 7.8.
  • CVE-2026-6276 - A custom Host: header used in an initial HTTP request could leak to a second host when the connection is reused without a new Host: header, resulting in a cookie leak. Affects curl, libcurl. - CVSS 3.7.
Medium Severity
  • CVE-2026-40914 - An application using the STOMP protocol with credentials granting only consume or send permission on an address could augment that address’s routing type without the createAddress permission. Affects org.apache.artemis:artemis-stomp-protocol. - CVSS 4.3.
  • CVE-2026-46917 - Easily exploitable vulnerability allows an unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. Affects openjdk21-jre-headless. - CVSS 5.3.
  • CVE-2026-46968 - Difficult to exploit vulnerability allows an unauthenticated attacker with network access via TLS to compromise Oracle Java SE. Affects openjdk21-jre-headless. - CVSS 5.9.
  • CVE-2026-47021 - Easily exploitable vulnerability allows an unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. Affects openjdk21-jre-headless. - CVSS 5.3.
  • CVE-2026-47027 - Easily exploitable vulnerability allows an unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Affects openjdk21-jre-headless. - CVSS 5.3.
  • CVE-2026-4873 - An unencrypted connection followed by a subsequent request requiring TLS to the same host could bypass the TLS requirement due to incorrect connection reuse, leaking data in cleartext. Affects curl, libcurl. - CVSS 5.3.
  • CVE-2026-54515 - Per-property @JsonIgnoreProperties exclusions combined with @JsonFormat(ACCEPT_CASE_INSENSITIVE_PROPERTIES) could restore properties that were meant to stay ignored, making them writable again. Affects com.fasterxml.jackson.core:jackson-databind. - CVSS 5.3.
  • CVE-2026-54704 - The OpenTelemetry Java agent’s JDBC auto-instrumentation fails to sanitize double-quoted passwords in SQL CONNECT statements, allowing clear-text database passwords to be written to trace span attributes. Affects io.opentelemetry.javaagent:opentelemetry-javaagent. - CVSS 6.5.
  • CVE-2026-54712 - Unbounded memory allocation in the OpenTelemetry Java agent’s RMI context propagation payload reader, which limits the number of context entries but not the aggregate size of the strings read from the stream. Affects io.opentelemetry.javaagent:opentelemetry-javaagent. - CVSS 7.5.
  • CVE-2026-5545 - An authenticated HTTP(S) request following a Negotiate-authenticated one to the same host may incorrectly reuse the previous connection, letting the second request run under different credentials. Affects curl, libcurl. - CVSS 6.5.
  • CVE-2026-56746 - Netty is vulnerable to a security control bypass during the origin evaluation process. Affects io.netty:netty-codec-http. - CVSS 6.5.
  • CVE-2026-59889 - A property annotated with both @JsonView and @JsonUnwrapped could be written from attacker JSON under a less-privileged active view. Affects com.fasterxml.jackson.core:jackson-databind. - CVSS 6.5.
  • CVE-2026-59898 - An attacker can force a WebSocket upgrade via the lax V07/V08 handshaker by omitting the Connection: Upgrade/Upgrade: websocket headers, enabling HTTP request smuggling. Affects io.netty:netty-codec-http.
  • CVE-2026-59899 - HttpContentEncoder maintains a per-channel queue that accumulates attacker-controlled data without any size limit. Affects io.netty:netty-codec-http.
  • CVE-2026-59900 - Netty’s HTTP/2-to-HTTP/1.x translation layer fails to deduplicate or validate Host headers when a client supplies both :authority and a literal host header. Affects io.netty:netty-codec-http2.
  • CVE-2026-59921 - CRLF injection via a multipart filename in Netty’s HttpPostRequestEncoder allows an attacker to inject arbitrary MIME headers. Affects io.netty:netty-codec-http. - CVSS 5.7.
  • CVE-2026-59949 - Insufficient validation of byte array arguments in JNI-based XXHash implementations allows callers to crash the JVM by passing an invalid array reference or range to native methods. Affects at.yawk.lz4:lz4-java. - CVSS 6.5.
  • CVE-2026-60147 - Easily exploitable vulnerability allows an unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. Affects openjdk21-jre-headless. - CVSS 6.5.
  • CVE-2026-6253 - Redirecting from an authenticated proxy to an unauthenticated one when using distinct proxies per URL scheme could inadvertently expose the initial proxy’s credentials. Affects curl, libcurl. - CVSS 5.3.
  • CVE-2026-6429 - Following an HTTP redirect while using a .netrc file for credentials could send the password from the initial connection to the redirected host. Affects curl, libcurl. - CVSS 6.5.
  • CVE-2026-7009 - Vulnerability fixed by upgrading the affected package. Affects curl, libcurl.
  • CVE-2026-7168 - Vulnerability fixed by upgrading the affected package. Affects curl, libcurl.
  • GHSA-mfg7-5gfp-c4w3 - A memory leak can be caused in Netty’s DNS codec by sending malicious DNS packets containing invalid domain names. Affects io.netty:netty-codec-dns. - CVSS 5.3.
  • GHSA-mhm7-754m-9p8w - A creator parameter annotated with both @JsonView(RestrictedView.class) and an external-type-id @JsonTypeInfo could be populated from attacker JSON even when a more restrictive view was active. Affects com.fasterxml.jackson.core:jackson-databind. - CVSS 6.5.
  • CVE-2026-54512 / CVE-2026-54513 - jackson-databind/jackson-core vulnerabilities remaining in the Tomcat distribution’s AI-agent overlay, whose lib-ai/ common loader was not governed by the distro’s Jackson version management. Fixed by pinning both to 2.21.4 and adding a Maven Enforcer guard against a silent transitive downgrade. (EE exclusive)
Low Severity
  • CVE-2026-47010 - Difficult to exploit vulnerability allows an unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. Affects openjdk21-jre-headless. - CVSS 3.7.
  • CVE-2026-47059 - Difficult to exploit vulnerability allows an unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. Affects openjdk21-jre-headless. - CVSS 3.7.

On this Page: