CIB seven 2.2.2 EE - Release Notes

Release Date: August 7, 2026

Highlights

  • Security 43 CVEs resolved across the platform: Task Filter JUEL expressions can now be restricted to a safe whitelist to prevent arbitrary function/bean invocation via filter expressions (opt-in, disabled by default); postgresql upgraded to 42.7.12 (CVE-2026-54291); jackson upgraded to 2.21.5 and pinned in the run4 distribution and in the Tomcat AI-agent overlay (CVE-2026-59889, CVE-2026-54512, CVE-2026-54513); wildfly upgraded to 41.0.0; netty, openjdk21, curl/libcurl, micrometer, cxf, mssql-jdbc, artemis, and lz4-java (CVE-2026-59949) updated to patched versions; OpenTelemetry Java agent updated to 2.28.1 in Docker images (CVE-2026-54704, CVE-2026-54712)
  • Authorization Fixed a permission gap allowing deletion of a historic process instance by a read-only user, and a system exception when a user without deployment-read permission opened the process definition view
  • BPMN AI Agent (EE exclusive) Fixed the chat WebSocket handshake failing (404) when the webclient is served under a path prefix
  • Modeler (EE exclusive) Fixed ModelerViewEE fetching element templates from the wrong services base path, causing 404s
  • Start Process Default start form now supports a business key and process variables when a process definition has no configured start form
  • Process Views BPMN diagram pan/zoom position is now persisted across process definition and instance views
  • Dates Webclient date fields now serialize as ISO-8601 strings instead of epoch milliseconds
  • Batch Operations (EE exclusive) New “Delete Deployments” batch operation wired into the Batch Operations wizard
  • BPMN AI Agent (EE exclusive) Per-model vision flag lets a text-only model gracefully skip image/PDF attachments instead of the request being rejected

New Features

Default Start Form

  • Processes without a configured start form now get a default start form supporting a business key and process variable input

Process Diagram Pan/Zoom Persistence

  • The BPMN viewer’s pan/zoom position is now persisted and restored across process definition and process instance views, relaying the underlying viewbox-changed event and exposing a setViewbox proxy

Modeler Enhancements

  • Replaced the Create-new dropdown on the start page with dedicated Create BPMN/DMN/Form actions

Delete Deployments Batch Operation (EE exclusive)

  • New “Delete Deployments” operation added to the Batch Operations wizard, matching the engine’s deployment-deletion batch type
  • New deployment search box and results table (query by name, source, tenant, deployment time; checkbox selection; id/name/source/deploymentTime/tenant columns), mirroring the existing batch operation table components
  • cascade, skipCustomListeners, and skipIoMappings parameters are exposed in the wizard, with the latter two shown only when cascade deletion is enabled
  • Translations added across all supported locales

BPMN AI Agent Vision Support (EE exclusive)

  • New per-model vision flag (cibseven.webclient.agent.models[].vision) lets a self-hosted or text-only model (e.g. a model pulled without a vision projector) drop image and PDF attachments with an in-line explanation instead of the provider rejecting the request
  • Defaults to true, so existing configuration keeps working unchanged
  • Documented in both the Spring Boot and WildFly application YAML

User Experience Improvements in Web Client

Deployments

  • Deployment queries now support the full set of query parameters (name, source, tenant, before/after deployment time), including correct handling of null parameters and + encoding in date parameters

Authorization

  • The “change password” menu item is now shown only to users with access rights to it
  • An “authorization disabled” warning banner is now shown on the Authorizations page when authorization is disabled
  • The BPMN viewer now searches only unfinished (active) process instances by default

Tasklist

  • Fixed filter task count not updating immediately after a task is completed
  • Fixed sorting descending with an active “Due date” filter returning no results
  • Fixed the task results page index not resetting when the filter list is updated with a new max-results value

Execution Metrics

  • Annual and monthly metrics retrieval now follows the selected groupBy parameter, and all years are shown
  • Added monthly chart interaction and row click handling
  • Fixed date formatting for yearly metrics to reflect the correct date range
  • Made the historic activity statistics call backwards compatible
  • Corrected number formatting (using i18n) in the cockpit, execution metrics, and human tasks views

Multi-Engine

  • Fixed direct and default engine lookup in EngineProvider
  • Fixed redirect to the previous page instead of the start page after login during an engine switch

Modeler

  • Extracted a reusable resize/splitter composable for the Properties panel

Accessibility

  • Added accessible labels to admin, process view/modal/table, task filter/search, tenant/deployment, and settings form controls
  • Added accessible labels to license and execution form controls (EE exclusive)
  • The form-control-has-label ESLint rule is now enforced as an error for CIB form wrappers

Bug Fixes

Dates

  • Webclient date fields now serialize as ISO-8601 strings instead of epoch milliseconds when the Webclient overrides Spring defaults

Security

  • Task Filter JUEL expressions (e.g. assigneeExpression) could be evaluated with full JUEL power and no content validation, allowing arbitrary function/method/bean invocation for anyone authorized to create or execute filters. Expressions can now be restricted to a safe whitelist — currentUser(), currentUserGroups(), now(), a whitelisted dateTime() expression, and plain literal text — covering stored filters, adhoc task queries, and or()/endOr() query branches. Operators can extend the whitelist via ProcessEngineConfigurationImpl#additionalAllowedFilterExpressions. Disabled by default; enable via the enableFilterExpressionWhitelist toggle.

Authorization

  • Fixed the “Delete instance” button in the process definition instances table being shown, and deletion being possible, without the required DELETE_HISTORY permission
  • Fixed the process definition view attempting to load deployment info for users without deployment-read permission, causing a system exception

BPMN AI Agent Chat (EE exclusive)

  • Fixed the chat WebSocket endpoint not being registered under the webclient’s application path, causing handshake failures (404) when the webclient is served under a path prefix

Modeler (EE exclusive)

  • Fixed ModelerViewEE fetching element templates from the wrong services base path (services/v1 instead of the app’s configured path), causing 404s

Batch Operations (EE exclusive)

  • Fixed the “correlate message” batch operation matching finished process instances; it now defaults to active instances only

History / “History Level None”

  • Fixed no data shown on the instance details view after a page reload when the history level is none
  • Fixed missing active-instance icon and incident indication on the instance details view when the history level is none
  • Fixed missing badges and activity filter in the BPMN viewer when the history level is none
  • History level configuration is now normalized to lowercase and handled consistently when no value is set

Variables

  • Fixed identical values shown for local variables that share a name but have different underlying values
  • Fixed the variable filter’s “like” search keeping non-string values as literal strings (EE exclusive)

Process Definitions

  • Fixed the process definition details view showing the wrong first/last started instance, and made the details-sidebar information icon keyboard-interactive
  • Fixed the process definition view requesting element templates even when the Modeler is disabled
  • Fixed a missing openIncidents field on the BPMN viewer model

Modeler

  • Fixed the Modeler not destroying bpmn-js/dmn-js editor instances on tab close, causing a memory and listener leak
  • Fixed leaked global event listeners on unmount (form modal and others)
  • Fixed the element-templates store crashing on a non-array response when the Modeler backend is disabled
  • Fixed the element-template picker to only offer templates already loaded in the Modeler
  • Fixed save/edit-lock failures being silently dropped instead of surfaced to the user
  • Fixed auto-entering a diagram when its id is present in the URL
  • Fixed diagram-js-minimap being externalized instead of bundled, which broke for CJS consumers
  • Updated diagram-js-minimap to 5.3.0 for diagram-js 15 compatibility

Forms

  • Fixed missing support for bpmnEscalation so embedded forms can report escalations
  • Fixed embedded-form SDK group/user/history calls to be served from typed middleware endpoints instead of failing against the wrong path
  • Fixed the embedded-form historic task query’s response count shape (EE exclusive)
  • Associated the business key label with its input on the default start form
  • Fixed the “Create Group” error message to precisely reflect an invalid group id

Direct Provider

  • Fixed variable enrichment in findTaskByFilter and the response media type in getDeployedForm

Backend

  • Fixed the LDAP configurable cache introduced in 2.2.1 failing with NoClassDefFoundError because the caffeine library was not shipped in the WildFly and Tomcat distributions

Technical Updates

Dependency Updates

  • Update jackson from 2.21.4 to 2.21.5; pinned in the run4 distribution to fix CVE-2026-59889, and in the Tomcat AI-agent overlay to 2.21.4 to fix CVE-2026-54512/CVE-2026-54513; WildFly 28 Jackson modules updated to 2.22.0; also fixes CVE-2026-54515 and GHSA-mhm7-754m-9p8w
  • Update wildfly from 40.0.1.Final to 41.0.0
  • Update postgresql (JDBC driver) from 42.7.11 to 42.7.12, fixing CVE-2026-54291
  • Update OpenTelemetry Java agent (Docker images) to 2.28.1, fixing CVE-2026-54704 and CVE-2026-54712
  • Update cibseven-modeler to 1.2.0
  • Update cibseven-modeler-ee to 1.2.0 (EE exclusive)
  • Update openjdk21 (openjdk21-jre-headless) from 21.0.11_p10-r0 to 21.0.12_p8-r0 (Alpine base image)
  • Update c-ares from 1.34.6-r0 to 1.34.8-r0 (Alpine base image), fixing CVE-2026-33630
  • Update curl (libcurl) from 8.19.0-r0 to 8.20.0-r0 (Alpine base image)
  • Update lz4-java (at.yawk.lz4:lz4-java) from 1.10.4 to 1.11.1, fixing CVE-2026-59949
  • Update netty (netty-codec-http, netty-codec-http2, netty-codec, netty-codec-dns) from 4.1.135.Final to 4.1.136.Final
  • Update micrometer (io.micrometer:micrometer-core) from 1.16.5 to 1.16.6, fixing CVE-2026-40983 and CVE-2026-40984
  • Update cxf (org.apache.cxf:cxf-core) from 4.0.11 to 4.1.7, fixing CVE-2026-50645
  • Update mssql-jdbc (com.microsoft.sqlserver:mssql-jdbc) to 12.8.2.jre11, fixing CVE-2025-59250
  • Update artemis (org.apache.artemis:artemis-stomp-protocol) from 2.53.0 to 2.54.0, fixing CVE-2026-40914
  • Update axios from 1.15.2 to 1.18.1, resolving reported npm vulnerabilities
  • Update vite from 6.4.2 to 6.4.3 and vitest from 3.2.4 to 3.2.7
  • Update bpm-sdk from 2.1.2 to 2.1.3
  • Update cibseven-bpmn-agent to 1.0.2 to support the multimodal per-model vision API (EE exclusive)
  • Update transitive dependencies dompurify (to 3.4.12), markdown-it (to 14.3.0), and fast-xml-parser (to 5.10.1) to resolve reported npm vulnerabilities

Build & Configuration

  • JDBC drivers are no longer bundled on the webclient’s runtime classpath
  • Resolved SonarQube security hotspots in the warning banner component (HTML-escaping) and in the Modeler (HTTPS test fixtures, regex handling)

Resolved CVE Vulnerabilities

High Severity
  • CVE-2025-59250 - Improper input validation in the JDBC Driver for SQL Server allows an unauthorized attacker to perform spoofing over a network. Affects com.microsoft.sqlserver:mssql-jdbc. - CVSS 8.1.
  • CVE-2026-33630 - Vulnerability fixed by upgrading the affected package. Affects c-ares.
  • CVE-2026-40983 - Specially crafted gRPC requests to Micrometer may cause a denial-of-service condition. Affects io.micrometer:micrometer-core. - CVSS 7.5.
  • CVE-2026-40984 - Specially crafted HTTP requests to Micrometer may cause a denial-of-service condition. Affects io.micrometer:micrometer-core. - CVSS 7.5.
  • CVE-2026-41254 - Little CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication. Affects openjdk21-jre-headless. - CVSS 7.5.
  • CVE-2026-47063 - Easily exploitable vulnerability allows an unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. Affects openjdk21-jre-headless. - CVSS 7.5.
  • CVE-2026-50645 - No restriction on the number of attachment headers a message can contain when deserialized by Apache CXF can lead to uncontrolled resource consumption or a denial of service attack. Affects org.apache.cxf:cxf-core. - CVSS 7.5.
  • CVE-2026-54291 - Channel-binding downgrade vulnerability in pgjdbc, allowing an on-path attacker to bypass SCRAM channel binding on the AI agent’s PostgreSQL connector. Affects org.postgresql:postgresql. - CVSS 5.9.
  • CVE-2026-55831 - Netty’s SPDY SETTINGS decoder accepts a peer-declared entry count up to the 24-bit frame-length limit, allowing a remote SPDY/3.1 peer to send an oversized SETTINGS frame that exhausts memory. Affects io.netty:netty-codec-http. - CVSS 7.5.
  • CVE-2026-55833 - Netty SPDY header decoding continues inflating zlib-compressed header blocks after the parser has exceeded maxHeaderSize, letting a small compressed block expand into much larger memory use. Affects io.netty:netty-codec-http. - CVSS 7.5.
  • CVE-2026-56745 - Vulnerability in Netty’s codec-http module, fixed in 4.1.136.Final and 4.2.16.Final. Affects io.netty:netty-codec-http.
  • CVE-2026-56819 - A remote unauthenticated peer can leak one direct ByteBuf per HTTP/2 DATA frame in applications that enable HTTP/2 content decompression via DelegatingDecompressorFrameListener. Affects io.netty:netty-codec-http2. - CVSS 7.5.
  • CVE-2026-5773 - A logical error in the connection reuse mechanism for SMB transfers could lead libcurl to reuse an existing SMB connection with a different share than intended. Affects curl, libcurl. - CVSS 6.5.
  • CVE-2026-59901 - The Bzip2Decoder handler in Netty’s compression codec pipeline is vulnerable to a denial-of-service attack via a malformed bzip2 stream that permanently captures the event-loop thread in an infinite loop. Affects io.netty:netty-codec.
  • CVE-2026-62574 - Easily exploitable vulnerability allows a low-privileged attacker with logon access to the infrastructure to compromise Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. Affects openjdk21-jre-headless. - CVSS 7.8.
  • CVE-2026-6276 - A custom Host: header used in an initial HTTP request could leak to a second host when the connection is reused without a new Host: header, resulting in a cookie leak. Affects curl, libcurl. - CVSS 3.7.
Medium Severity
  • CVE-2026-40914 - An application using the STOMP protocol with credentials granting only consume or send permission on an address could augment that address’s routing type without the createAddress permission. Affects org.apache.artemis:artemis-stomp-protocol. - CVSS 4.3.
  • CVE-2026-46917 - Easily exploitable vulnerability allows an unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. Affects openjdk21-jre-headless. - CVSS 5.3.
  • CVE-2026-46968 - Difficult to exploit vulnerability allows an unauthenticated attacker with network access via TLS to compromise Oracle Java SE. Affects openjdk21-jre-headless. - CVSS 5.9.
  • CVE-2026-47021 - Easily exploitable vulnerability allows an unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. Affects openjdk21-jre-headless. - CVSS 5.3.
  • CVE-2026-47027 - Easily exploitable vulnerability allows an unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Affects openjdk21-jre-headless. - CVSS 5.3.
  • CVE-2026-4873 - An unencrypted connection followed by a subsequent request requiring TLS to the same host could bypass the TLS requirement due to incorrect connection reuse, leaking data in cleartext. Affects curl, libcurl. - CVSS 5.3.
  • CVE-2026-54515 - Per-property @JsonIgnoreProperties exclusions combined with @JsonFormat(ACCEPT_CASE_INSENSITIVE_PROPERTIES) could restore properties that were meant to stay ignored, making them writable again. Affects com.fasterxml.jackson.core:jackson-databind. - CVSS 5.3.
  • CVE-2026-54704 - The OpenTelemetry Java agent’s JDBC auto-instrumentation fails to sanitize double-quoted passwords in SQL CONNECT statements, allowing clear-text database passwords to be written to trace span attributes. Affects io.opentelemetry.javaagent:opentelemetry-javaagent. - CVSS 6.5.
  • CVE-2026-54712 - Unbounded memory allocation in the OpenTelemetry Java agent’s RMI context propagation payload reader, which limits the number of context entries but not the aggregate size of the strings read from the stream. Affects io.opentelemetry.javaagent:opentelemetry-javaagent. - CVSS 7.5.
  • CVE-2026-5545 - An authenticated HTTP(S) request following a Negotiate-authenticated one to the same host may incorrectly reuse the previous connection, letting the second request run under different credentials. Affects curl, libcurl. - CVSS 6.5.
  • CVE-2026-56746 - Netty is vulnerable to a security control bypass during the origin evaluation process. Affects io.netty:netty-codec-http. - CVSS 6.5.
  • CVE-2026-59889 - A property annotated with both @JsonView and @JsonUnwrapped could be written from attacker JSON under a less-privileged active view. Affects com.fasterxml.jackson.core:jackson-databind. - CVSS 6.5.
  • CVE-2026-59898 - An attacker can force a WebSocket upgrade via the lax V07/V08 handshaker by omitting the Connection: Upgrade/Upgrade: websocket headers, enabling HTTP request smuggling. Affects io.netty:netty-codec-http.
  • CVE-2026-59899 - HttpContentEncoder maintains a per-channel queue that accumulates attacker-controlled data without any size limit. Affects io.netty:netty-codec-http.
  • CVE-2026-59900 - Netty’s HTTP/2-to-HTTP/1.x translation layer fails to deduplicate or validate Host headers when a client supplies both :authority and a literal host header. Affects io.netty:netty-codec-http2.
  • CVE-2026-59921 - CRLF injection via a multipart filename in Netty’s HttpPostRequestEncoder allows an attacker to inject arbitrary MIME headers. Affects io.netty:netty-codec-http. - CVSS 5.7.
  • CVE-2026-59949 - Insufficient validation of byte array arguments in JNI-based XXHash implementations allows callers to crash the JVM by passing an invalid array reference or range to native methods. Affects at.yawk.lz4:lz4-java. - CVSS 6.5.
  • CVE-2026-60147 - Easily exploitable vulnerability allows an unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. Affects openjdk21-jre-headless. - CVSS 6.5.
  • CVE-2026-6253 - Redirecting from an authenticated proxy to an unauthenticated one when using distinct proxies per URL scheme could inadvertently expose the initial proxy’s credentials. Affects curl, libcurl. - CVSS 5.3.
  • CVE-2026-6429 - Following an HTTP redirect while using a .netrc file for credentials could send the password from the initial connection to the redirected host. Affects curl, libcurl. - CVSS 6.5.
  • CVE-2026-7009 - Vulnerability fixed by upgrading the affected package. Affects curl, libcurl.
  • CVE-2026-7168 - Vulnerability fixed by upgrading the affected package. Affects curl, libcurl.
  • GHSA-mfg7-5gfp-c4w3 - A memory leak can be caused in Netty’s DNS codec by sending malicious DNS packets containing invalid domain names. Affects io.netty:netty-codec-dns. - CVSS 5.3.
  • GHSA-mhm7-754m-9p8w - A creator parameter annotated with both @JsonView(RestrictedView.class) and an external-type-id @JsonTypeInfo could be populated from attacker JSON even when a more restrictive view was active. Affects com.fasterxml.jackson.core:jackson-databind. - CVSS 6.5.
  • CVE-2026-54512 / CVE-2026-54513 - jackson-databind/jackson-core vulnerabilities remaining in the Tomcat distribution’s AI-agent overlay, whose lib-ai/ common loader was not governed by the distro’s Jackson version management. Fixed by pinning both to 2.21.4 and adding a Maven Enforcer guard against a silent transitive downgrade. (EE exclusive)
Low Severity
  • CVE-2026-47010 - Difficult to exploit vulnerability allows an unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. Affects openjdk21-jre-headless. - CVSS 3.7.
  • CVE-2026-47059 - Difficult to exploit vulnerability allows an unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. Affects openjdk21-jre-headless. - CVSS 3.7.

On this Page: