Privileged Remote Access 26.2.3 release notes
September 24th, 2026
🆕 New features and enhancements
This is a maintenance release. There are no new features.
🛠️ Issues resolved
| Product area | Description | Resolution |
|---|---|---|
| API | The Vault account group membership and Vault endpoint configuration APIs enforced the wrong permission when evaluating requests. | These APIs now enforce the correct permission. |
| API | The GET /api/command?action=get_connected_client_list call omitted the pinned client count when type=all was specified, so pinned client counts could not be retrieved. | The response now includes the pinned client count when type=all is specified. |
| API | The Jump Item configuration APIs, such as GET /api/config/v1/jump-item/web-jump, did not enforce the Configuration API permission and did not inherit Allow Access permissions. | The Jump Item configuration APIs now enforce the Configuration API permission. |
| Credential Injection | The main dispatch thread stopped responding permanently when a credential injection timeout occurred for a disconnected representative. | A race condition is resolved, and credential injection timeouts for disconnected representatives no longer stop the dispatch thread. |
| Jump Clients | A small number of Jump Clients upgraded even though automatic upgrades were disabled. | A race condition is resolved, and Jump Clients now honor the automatic upgrade setting. |
| Jump Groups | Jump Group provisioning issued one database round trip per Jump Group, causing significant lag on the user index for users who belong to very large numbers of Jump Groups. | Jump Group provisioning is optimized, and the user index loads without lag for users in very large numbers of Jump Groups. |
| Session Management | Administrators could not approve incoming connections using the link in the notification email. | Administrators can now approve incoming connections from the email link. |
| SSH Proxy | The SSH Bring Your Own Tool (BYOT) proxy could crash when a callback was received while filtering, such as when text was pasted into a session. | A race condition is resolved, and the SSH BYOT proxy no longer crashes in this scenario. |
📝 Requirements
- Requires Base 8.3.0.
- Supports upgrades fromPrivileged Remote Access 25.3.5.
- Supports Endpoint Credential Manager (ECM) Protocol 1.6.
- Validated with ECM 1.6.2601.35016.
- Validated with Integration Client 26.1.3.210.
- Includes VSC 1.3.0.0.
