[{"url":"https://api.github.com/repos/gravitational/teleport/releases/351232201","assets_url":"https://api.github.com/repos/gravitational/teleport/releases/351232201/assets","upload_url":"https://uploads.github.com/repos/gravitational/teleport/releases/351232201/assets{?name,label}","html_url":"https://github.com/gravitational/teleport/releases/tag/v18.10.0","id":351232201,"author":{"login":"r0mant","id":339322,"node_id":"MDQ6VXNlcjMzOTMyMg==","avatar_url":"https://avatars.githubusercontent.com/u/339322?v=4","gravatar_id":"","url":"https://api.github.com/users/r0mant","html_url":"https://github.com/r0mant","followers_url":"https://api.github.com/users/r0mant/followers","following_url":"https://api.github.com/users/r0mant/following{/other_user}","gists_url":"https://api.github.com/users/r0mant/gists{/gist_id}","starred_url":"https://api.github.com/users/r0mant/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/r0mant/subscriptions","organizations_url":"https://api.github.com/users/r0mant/orgs","repos_url":"https://api.github.com/users/r0mant/repos","events_url":"https://api.github.com/users/r0mant/events{/privacy}","received_events_url":"https://api.github.com/users/r0mant/received_events","type":"User","user_view_type":"public","site_admin":false},"node_id":"RE_kwDOAeGNGc4U72DJ","tag_name":"v18.10.0","target_commitish":"master","name":"Teleport 18.10.0","draft":false,"immutable":false,"prerelease":false,"created_at":"2026-07-08T11:18:04Z","updated_at":"2026-07-20T17:41:22Z","published_at":"2026-07-09T00:01:09Z","assets":[],"tarball_url":"https://api.github.com/repos/gravitational/teleport/tarball/v18.10.0","zipball_url":"https://api.github.com/repos/gravitational/teleport/zipball/v18.10.0","body":"## Description\r\n\r\n### Directory sharing enhancements for Windows desktop access\r\n\r\nTeleport now supports sharing multiple directories in a single RDP session. In\r\naddition, users will be able to unmount shared directories without terminating\r\nthe session.\r\n\r\n### Windows sessions summaries\r\n\r\nIdentity Security now supports AI summarization for Windows desktop access\r\nsession recordings.\r\n\r\n### Other fixes and improvements\r\n\r\n* Resolve connectivity issues with the Redshift database through the MCP. [#68337](https://github.com/gravitational/teleport/pull/68337)\r\n* Fixed premature session expiry for Application Access. [#68337](https://github.com/gravitational/teleport/pull/68357)\r\n* Updated dependencies (addresses GO-2026-5547 and GO-2026-5694). [#68152](https://github.com/gravitational/teleport/pull/68152)\r\n* Kubernetes resource RBAC now honors a wildcard (`*`) verb regardless of its position in the `verbs` list, including when introduced via trait templating. [#68143](https://github.com/gravitational/teleport/pull/68143)\r\n* Added the Sub CA `tctl auth update-override` command, a user-friendly alternative over `tctl create -f` or `tctl edit ca_overrides`. [#68189](https://github.com/gravitational/teleport/pull/68189)\r\n* Kubernetes: adding an ephemeral container to a pod (`pods/ephemeralcontainers`) now requires both the `exec` and `patch`/`update` verbs in the same role&#39;s `kubernetes_resources`. Previously only `patch`/`update` was required. [#68159](https://github.com/gravitational/teleport/pull/68159)\r\n* Invalid role expressions are now rejected at creation time. [#67607](https://github.com/gravitational/teleport/pull/67607)\r\n* Reject wildcards in role.allow.request.search_as_roles and role.allow.review_requests.preview_as_roles at creation time. [#67607](https://github.com/gravitational/teleport/pull/67607)\r\n* Add missing validation for role.allow.require_session_join and role.allow.join_sessions fields. [#67607](https://github.com/gravitational/teleport/pull/67607)\r\n* Improved the rate of Azure VM auto-discovery and enrollment. [#67941](https://github.com/gravitational/teleport/pull/67941)\r\n* Fixed cloud-hosted Slack plugin exposing credentials in request URLs. [#68017](https://github.com/gravitational/teleport/pull/68017)\r\n* Fix an issue where the WebUI would prompt for MFA multiple times for admin actions (or outright fail for select commands) when `sso` is the only allowed second factor on the cluster. [#67867](https://github.com/gravitational/teleport/pull/67867)\r\n* Prevent misrouting when multiple apps share the same public address. [#67947](https://github.com/gravitational/teleport/pull/67947)\r\n* Fix MFA prompts to show correct --mfa-mode values for webauthn authenticators. [#67971](https://github.com/gravitational/teleport/pull/67971)\r\n* Fixed HTTP application access connections returning repeated 403 errors after certificate renewal. When the certificate behind a long-lived connection expires, the proxy now sends `Connection: close` so the client reestablishes the connection with a renewed certificate instead of reusing a dead one. [#68099](https://github.com/gravitational/teleport/pull/68099)\r\n* Add &#34;tsh apps logins&#34; command to query available logins for the given cloud application (currently only AWS is supported). [#68052](https://github.com/gravitational/teleport/pull/68052)\r\n* Added the Sub CA `tctl auth delete-override` command, a user-friendly alternative over `tctl edit ca_overrides` or `tctl rm ca_overrides`. [#68014](https://github.com/gravitational/teleport/pull/68014)\r\n\r\nEnterprise:\r\n* Changed Sub CA RPCs to emit audit error events for all failures.\r\n* Fixed Access List review badge not appearing on the main page for users who are both an owner and a member of an Access List.\r\n\r\n## Download\r\n\r\nDownload the current and previous releases of Teleport at https://goteleport.com/download.\r\n\r\n## Plugins\r\n\r\nDownload the current release of Teleport plugins from the links below.\r\n* Slack [Linux amd64](https://cdn.teleport.dev/teleport-access-slack-v18.10.0-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-slack-v18.10.0-linux-arm64-bin.tar.gz) \r\n* Mattermost [Linux amd64](https://cdn.teleport.dev/teleport-access-mattermost-v18.10.0-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-mattermost-v18.10.0-linux-arm64-bin.tar.gz)\r\n* Discord [Linux amd64](https://cdn.teleport.dev/teleport-access-discord-v18.10.0-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-discord-v18.10.0-linux-arm64-bin.tar.gz)\r\n* Terraform Provider [Linux amd64](https://cdn.teleport.dev/terraform-provider-teleport-v18.10.0-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/terraform-provider-teleport-v18.10.0-linux-arm64-bin.tar.gz) | [macOS amd64](https://cdn.teleport.dev/terraform-provider-teleport-v18.10.0-darwin-amd64-bin.tar.gz) | [macOS arm64](https://cdn.teleport.dev/terraform-provider-teleport-v18.10.0-darwin-arm64-bin.tar.gz) | [macOS universal](https://cdn.teleport.dev/terraform-provider-teleport-v18.10.0-darwin-universal-bin.tar.gz)\r\n* Event Handler [Linux amd64](https://cdn.teleport.dev/teleport-event-handler-v18.10.0-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-event-handler-v18.10.0-linux-arm64-bin.tar.gz) | [macOS amd64](https://cdn.teleport.dev/teleport-event-handler-v18.10.0-darwin-amd64-bin.tar.gz)\r\n* PagerDuty [Linux amd64](https://cdn.teleport.dev/teleport-access-pagerduty-v18.10.0-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-pagerduty-v18.10.0-linux-arm64-bin.tar.gz)\r\n* Jira [Linux amd64](https://cdn.teleport.dev/teleport-access-jira-v18.10.0-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-jira-v18.10.0-linux-arm64-bin.tar.gz)\r\n* Email [Linux amd64](https://cdn.teleport.dev/teleport-access-email-v18.10.0-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-email-v18.10.0-linux-arm64-bin.tar.gz)\r\n* Microsoft Teams [Linux amd64](https://cdn.teleport.dev/teleport-access-msteams-v18.10.0-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-msteams-v18.10.0-linux-arm64-bin.tar.gz)\r\n"},{"url":"https://api.github.com/repos/gravitational/teleport/releases/349971036","assets_url":"https://api.github.com/repos/gravitational/teleport/releases/349971036/assets","upload_url":"https://uploads.github.com/repos/gravitational/teleport/releases/349971036/assets{?name,label}","html_url":"https://github.com/gravitational/teleport/releases/tag/v18.10.0-rc.2","id":349971036,"author":{"login":"r0mant","id":339322,"node_id":"MDQ6VXNlcjMzOTMyMg==","avatar_url":"https://avatars.githubusercontent.com/u/339322?v=4","gravatar_id":"","url":"https://api.github.com/users/r0mant","html_url":"https://github.com/r0mant","followers_url":"https://api.github.com/users/r0mant/followers","following_url":"https://api.github.com/users/r0mant/following{/other_user}","gists_url":"https://api.github.com/users/r0mant/gists{/gist_id}","starred_url":"https://api.github.com/users/r0mant/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/r0mant/subscriptions","organizations_url":"https://api.github.com/users/r0mant/orgs","repos_url":"https://api.github.com/users/r0mant/repos","events_url":"https://api.github.com/users/r0mant/events{/privacy}","received_events_url":"https://api.github.com/users/r0mant/received_events","type":"User","user_view_type":"public","site_admin":false},"node_id":"RE_kwDOAeGNGc4U3CJc","tag_name":"v18.10.0-rc.2","target_commitish":"master","name":"Teleport 18.10.0-rc.2","draft":false,"immutable":false,"prerelease":true,"created_at":"2026-07-06T21:29:17Z","updated_at":"2026-07-07T01:29:07Z","published_at":"2026-07-07T01:29:07Z","assets":[],"tarball_url":"https://api.github.com/repos/gravitational/teleport/tarball/v18.10.0-rc.2","zipball_url":"https://api.github.com/repos/gravitational/teleport/zipball/v18.10.0-rc.2","body":"## Warning\r\n\r\nPre-releases are not production ready, use at your own risk!\r\n\r\n## Download\r\n\r\nDownload the current and previous stable releases of Teleport at https://goteleport.com/download.","reactions":{"url":"https://api.github.com/repos/gravitational/teleport/releases/349971036/reactions","total_count":1,"+1":1,"-1":0,"laugh":0,"hooray":0,"confused":0,"heart":0,"rocket":0,"eyes":0}},{"url":"https://api.github.com/repos/gravitational/teleport/releases/347491334","assets_url":"https://api.github.com/repos/gravitational/teleport/releases/347491334/assets","upload_url":"https://uploads.github.com/repos/gravitational/teleport/releases/347491334/assets{?name,label}","html_url":"https://github.com/gravitational/teleport/releases/tag/v18.10.0-rc.1","id":347491334,"author":{"login":"r0mant","id":339322,"node_id":"MDQ6VXNlcjMzOTMyMg==","avatar_url":"https://avatars.githubusercontent.com/u/339322?v=4","gravatar_id":"","url":"https://api.github.com/users/r0mant","html_url":"https://github.com/r0mant","followers_url":"https://api.github.com/users/r0mant/followers","following_url":"https://api.github.com/users/r0mant/following{/other_user}","gists_url":"https://api.github.com/users/r0mant/gists{/gist_id}","starred_url":"https://api.github.com/users/r0mant/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/r0mant/subscriptions","organizations_url":"https://api.github.com/users/r0mant/orgs","repos_url":"https://api.github.com/users/r0mant/repos","events_url":"https://api.github.com/users/r0mant/events{/privacy}","received_events_url":"https://api.github.com/users/r0mant/received_events","type":"User","user_view_type":"public","site_admin":false},"node_id":"RE_kwDOAeGNGc4UtkwG","tag_name":"v18.10.0-rc.1","target_commitish":"master","name":"Teleport 18.10.0-rc.1","draft":false,"immutable":false,"prerelease":true,"created_at":"2026-07-01T01:03:25Z","updated_at":"2026-07-01T13:51:53Z","published_at":"2026-07-01T13:51:53Z","assets":[],"tarball_url":"https://api.github.com/repos/gravitational/teleport/tarball/v18.10.0-rc.1","zipball_url":"https://api.github.com/repos/gravitational/teleport/zipball/v18.10.0-rc.1","body":"## Warning\r\n\r\nPre-releases are not production ready, use at your own risk!\r\n\r\n## Download\r\n\r\nDownload the current and previous stable releases of Teleport at https://goteleport.com/download.","reactions":{"url":"https://api.github.com/repos/gravitational/teleport/releases/347491334/reactions","total_count":1,"+1":0,"-1":0,"laugh":0,"hooray":1,"confused":0,"heart":0,"rocket":0,"eyes":0}},{"url":"https://api.github.com/repos/gravitational/teleport/releases/346326914","assets_url":"https://api.github.com/repos/gravitational/teleport/releases/346326914/assets","upload_url":"https://uploads.github.com/repos/gravitational/teleport/releases/346326914/assets{?name,label}","html_url":"https://github.com/gravitational/teleport/releases/tag/v18.9.2","id":346326914,"author":{"login":"r0mant","id":339322,"node_id":"MDQ6VXNlcjMzOTMyMg==","avatar_url":"https://avatars.githubusercontent.com/u/339322?v=4","gravatar_id":"","url":"https://api.github.com/users/r0mant","html_url":"https://github.com/r0mant","followers_url":"https://api.github.com/users/r0mant/followers","following_url":"https://api.github.com/users/r0mant/following{/other_user}","gists_url":"https://api.github.com/users/r0mant/gists{/gist_id}","starred_url":"https://api.github.com/users/r0mant/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/r0mant/subscriptions","organizations_url":"https://api.github.com/users/r0mant/orgs","repos_url":"https://api.github.com/users/r0mant/repos","events_url":"https://api.github.com/users/r0mant/events{/privacy}","received_events_url":"https://api.github.com/users/r0mant/received_events","type":"User","user_view_type":"public","site_admin":false},"node_id":"RE_kwDOAeGNGc4UpIeC","tag_name":"v18.9.2","target_commitish":"master","name":"Teleport 18.9.2","draft":false,"immutable":false,"prerelease":false,"created_at":"2026-06-26T20:44:57Z","updated_at":"2026-07-01T21:53:52Z","published_at":"2026-06-29T14:46:55Z","assets":[],"tarball_url":"https://api.github.com/repos/gravitational/teleport/tarball/v18.9.2","zipball_url":"https://api.github.com/repos/gravitational/teleport/zipball/v18.9.2","body":"## Description\r\n\r\n* Fixed desktop connection failures to Windows 11 / Windows Server 2025 instances. [#67483](https://github.com/gravitational/teleport/pull/67483)\r\n* Fixed potential deadlock when reading access list owners from the cache as the cache becomes unhealthy. [#68013](https://github.com/gravitational/teleport/pull/68013)\r\n* Added the Sub CA `tctl auth create-override` command, a user-friendly alternative over `tctl create ca_override.yaml`. [#67983](https://github.com/gravitational/teleport/pull/67983)\r\n* Add `--interactive` flag to prompt for role from stdin if `--interactive` flag is provided. [#67951](https://github.com/gravitational/teleport/pull/67951)\r\n* Fixed Teleport Connect file uploads for empty files. [#67925](https://github.com/gravitational/teleport/pull/67925)\r\n* Added scope info to user metadata in audit events. [#67413](https://github.com/gravitational/teleport/pull/67413)\r\n* Sanitized AWS console federation transport errors to avoid logging AWS session credential material. [#67199](https://github.com/gravitational/teleport/pull/67199)\r\n* Joining agents and `tsh` now report a clean, actionable error when a proxy returns an unsuccessful response to a ping or find request. [#67912](https://github.com/gravitational/teleport/pull/67912)\r\n* Reduced write load for the cluster state storage in clusters with large amounts of app resources. [#62243](https://github.com/gravitational/teleport/pull/62243)\r\n* Updated moderated upload path validation to require an absolute path to a file to prevent confusion. [#67741](https://github.com/gravitational/teleport/pull/67741)\r\n* Added support for the following Oracle Cloud regions: ap-kulai-2, sa-riodejaneiro-1, af-casablanca-1, and me-alrayyan-1. [#67858](https://github.com/gravitational/teleport/pull/67858)\r\n* Add scope support for openSSH and proxy recording mode. [#67271](https://github.com/gravitational/teleport/pull/67271)\r\n* Add locking mode, disconnect expired cert, enhanced session recording, and session recording mode to scoped roles. [#67269](https://github.com/gravitational/teleport/pull/67269)\r\n* Fixed an issue where path separators could be included in scp file names during upload. [#67772](https://github.com/gravitational/teleport/pull/67772)\r\n* Prevented users with the same name in different clusters from being able to cancel each others' remote port forwards. [#67689](https://github.com/gravitational/teleport/pull/67689)\r\n* Fixed a preflight check in Server Discovery where the script would exit even though there was enough space in `/opt/teleport`. [#67596](https://github.com/gravitational/teleport/pull/67596)\r\n* Fixed an issue in Server Discovery that would prevent suffixed installations in VMs using Ubuntu 25.10 or Ubuntu 26.04. [#67709](https://github.com/gravitational/teleport/pull/67709)\r\n* Fixed an SSRF vulnerability in AWS application access where a crafted `X-Forwarded-Host` header could divert IAM-signed AWS API requests to an attacker-controlled host. [#67706](https://github.com/gravitational/teleport/pull/67706)\r\n* Cap AWS STS AssumeRole session duration to the Teleport identity TTL, including query-string AssumeRole requests and requests made with cached assumed-role credentials. [#67704](https://github.com/gravitational/teleport/pull/67704)\r\n* Fixed an issue where bots could fail to join with `missing identity groups or scope pin` when deleted and recreated quickly. [#67645](https://github.com/gravitational/teleport/pull/67645)\r\n* Update golang.org/x/crypto to v0.53.0. [#67640](https://github.com/gravitational/teleport/pull/67640)\r\n* Fixed role impersonation incorrectly being affected by user allow/deny rules. [#67691](https://github.com/gravitational/teleport/pull/67691)\r\n* Fixed Resource Constraints UI visibility for AWS Console app resources created via integrations or tctl. [#67531](https://github.com/gravitational/teleport/pull/67531)\r\n* Fixed Windows and Linux desktop Connect dropdowns showing logins from roles the user can request but hasn't been granted. [#67090](https://github.com/gravitational/teleport/pull/67090)\r\n* EKS agent enrollment installs at the cluster version. [#66868](https://github.com/gravitational/teleport/pull/66868)\r\n\r\nEnterprise changes:\r\n* Only process Okta assignments for groups and apps currently being synced.\r\n* Prevent user-deletion of Access Lists being synced by Okta integration.\r\n* Fix plugins metrics registration.\r\n* Updated Teleport Entra ID integration to support delta sync.\r\n* Add support for rate limiting in the Teleport SCIM Server.\r\n* Update golang.org/x/crypto to v0.53.0.\r\n\r\n## Download\r\n\r\nDownload the current and previous releases of Teleport at https://goteleport.com/download.\r\n\r\n## Plugins\r\n\r\nDownload the current release of Teleport plugins from the links below.\r\n* Slack [Linux amd64](https://cdn.teleport.dev/teleport-access-slack-v18.9.2-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-slack-v18.9.2-linux-arm64-bin.tar.gz) \r\n* Mattermost [Linux amd64](https://cdn.teleport.dev/teleport-access-mattermost-v18.9.2-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-mattermost-v18.9.2-linux-arm64-bin.tar.gz)\r\n* Discord [Linux amd64](https://cdn.teleport.dev/teleport-access-discord-v18.9.2-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-discord-v18.9.2-linux-arm64-bin.tar.gz)\r\n* Terraform Provider [Linux amd64](https://cdn.teleport.dev/terraform-provider-teleport-v18.9.2-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/terraform-provider-teleport-v18.9.2-linux-arm64-bin.tar.gz) | [macOS amd64](https://cdn.teleport.dev/terraform-provider-teleport-v18.9.2-darwin-amd64-bin.tar.gz) | [macOS arm64](https://cdn.teleport.dev/terraform-provider-teleport-v18.9.2-darwin-arm64-bin.tar.gz) | [macOS universal](https://cdn.teleport.dev/terraform-provider-teleport-v18.9.2-darwin-universal-bin.tar.gz)\r\n* Event Handler [Linux amd64](https://cdn.teleport.dev/teleport-event-handler-v18.9.2-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-event-handler-v18.9.2-linux-arm64-bin.tar.gz) | [macOS amd64](https://cdn.teleport.dev/teleport-event-handler-v18.9.2-darwin-amd64-bin.tar.gz)\r\n* PagerDuty [Linux amd64](https://cdn.teleport.dev/teleport-access-pagerduty-v18.9.2-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-pagerduty-v18.9.2-linux-arm64-bin.tar.gz)\r\n* Jira [Linux amd64](https://cdn.teleport.dev/teleport-access-jira-v18.9.2-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-jira-v18.9.2-linux-arm64-bin.tar.gz)\r\n* Email [Linux amd64](https://cdn.teleport.dev/teleport-access-email-v18.9.2-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-email-v18.9.2-linux-arm64-bin.tar.gz)\r\n* Microsoft Teams [Linux amd64](https://cdn.teleport.dev/teleport-access-msteams-v18.9.2-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-msteams-v18.9.2-linux-arm64-bin.tar.gz)\r\n","reactions":{"url":"https://api.github.com/repos/gravitational/teleport/releases/346326914/reactions","total_count":1,"+1":1,"-1":0,"laugh":0,"hooray":0,"confused":0,"heart":0,"rocket":0,"eyes":0}},{"url":"https://api.github.com/repos/gravitational/teleport/releases/343820650","assets_url":"https://api.github.com/repos/gravitational/teleport/releases/343820650/assets","upload_url":"https://uploads.github.com/repos/gravitational/teleport/releases/343820650/assets{?name,label}","html_url":"https://github.com/gravitational/teleport/releases/tag/v18.9.2-rc.1","id":343820650,"author":{"login":"r0mant","id":339322,"node_id":"MDQ6VXNlcjMzOTMyMg==","avatar_url":"https://avatars.githubusercontent.com/u/339322?v=4","gravatar_id":"","url":"https://api.github.com/users/r0mant","html_url":"https://github.com/r0mant","followers_url":"https://api.github.com/users/r0mant/followers","following_url":"https://api.github.com/users/r0mant/following{/other_user}","gists_url":"https://api.github.com/users/r0mant/gists{/gist_id}","starred_url":"https://api.github.com/users/r0mant/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/r0mant/subscriptions","organizations_url":"https://api.github.com/users/r0mant/orgs","repos_url":"https://api.github.com/users/r0mant/repos","events_url":"https://api.github.com/users/r0mant/events{/privacy}","received_events_url":"https://api.github.com/users/r0mant/received_events","type":"User","user_view_type":"public","site_admin":false},"node_id":"RE_kwDOAeGNGc4Ufklq","tag_name":"v18.9.2-rc.1","target_commitish":"master","name":"Teleport 18.9.2-rc.1","draft":false,"immutable":false,"prerelease":true,"created_at":"2026-06-23T20:27:48Z","updated_at":"2026-06-24T00:08:23Z","published_at":"2026-06-24T00:08:23Z","assets":[],"tarball_url":"https://api.github.com/repos/gravitational/teleport/tarball/v18.9.2-rc.1","zipball_url":"https://api.github.com/repos/gravitational/teleport/zipball/v18.9.2-rc.1","body":"## Warning\r\n\r\nPre-releases are not production ready, use at your own risk!\r\n\r\n## Download\r\n\r\nDownload the current and previous stable releases of Teleport at https://goteleport.com/download."},{"url":"https://api.github.com/repos/gravitational/teleport/releases/343664908","assets_url":"https://api.github.com/repos/gravitational/teleport/releases/343664908/assets","upload_url":"https://uploads.github.com/repos/gravitational/teleport/releases/343664908/assets{?name,label}","html_url":"https://github.com/gravitational/teleport/releases/tag/v17.7.26","id":343664908,"author":{"login":"r0mant","id":339322,"node_id":"MDQ6VXNlcjMzOTMyMg==","avatar_url":"https://avatars.githubusercontent.com/u/339322?v=4","gravatar_id":"","url":"https://api.github.com/users/r0mant","html_url":"https://github.com/r0mant","followers_url":"https://api.github.com/users/r0mant/followers","following_url":"https://api.github.com/users/r0mant/following{/other_user}","gists_url":"https://api.github.com/users/r0mant/gists{/gist_id}","starred_url":"https://api.github.com/users/r0mant/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/r0mant/subscriptions","organizations_url":"https://api.github.com/users/r0mant/orgs","repos_url":"https://api.github.com/users/r0mant/repos","events_url":"https://api.github.com/users/r0mant/events{/privacy}","received_events_url":"https://api.github.com/users/r0mant/received_events","type":"User","user_view_type":"public","site_admin":false},"node_id":"RE_kwDOAeGNGc4Ue-kM","tag_name":"v17.7.26","target_commitish":"master","name":"Teleport 17.7.26","draft":false,"immutable":false,"prerelease":false,"created_at":"2026-06-22T20:19:44Z","updated_at":"2026-06-23T17:52:55Z","published_at":"2026-06-23T17:52:55Z","assets":[],"tarball_url":"https://api.github.com/repos/gravitational/teleport/tarball/v17.7.26","zipball_url":"https://api.github.com/repos/gravitational/teleport/zipball/v17.7.26","body":"## Description\n\n### Breaking changes\n\n#### Kubernetes API server proxy access\n\nAccess to the Kubernetes API server `pods/{name}/proxy/{path}`,\n`services/{name}/proxy/{path}`, and `nodes/{name}/proxy/{path}`\nendpoints now requires the new `proxy` verb in `kubernetes_resources`.\nPreviously these endpoints were authorized as the `get` verb. Roles\nthat use the Kubernetes API server proxy must add `&#34;proxy&#34;` to the\nrelevant `verbs` list.\n\n### Other fixes and improvements\n\n* Fixed Teleport Connect file uploads for empty files. [#67926](https://github.com/gravitational/teleport/pull/67926)\n* Fixed an issue where path separators could be included in scp file names during upload. [#67773](https://github.com/gravitational/teleport/pull/67773)\n* Sanitized AWS console federation transport errors to avoid logging AWS session credential material. [#67708](https://github.com/gravitational/teleport/pull/67708)\n* Fixed an SSRF vulnerability in AWS application access where a crafted X-Forwarded-Host header could divert IAM-signed AWS API requests to an attacker-controlled host. [#67707](https://github.com/gravitational/teleport/pull/67707)\n* Cap AWS STS AssumeRole session duration to the Teleport identity TTL, including query-string AssumeRole requests and requests made with cached assumed-role credentials. [#67705](https://github.com/gravitational/teleport/pull/67705)\n* Fixed role impersonation incorrectly being affected by user allow/deny rules. [#67690](https://github.com/gravitational/teleport/pull/67690)\n* Prevented users with the same name in different clusters from being able to cancel each others&#39; remote port forwards. [#67688](https://github.com/gravitational/teleport/pull/67688)\n* Update golang.org/x/crypto to v0.53.0. [#67641](https://github.com/gravitational/teleport/pull/67641)\n\n## Download\n\nDownload the current and previous releases of Teleport at https://goteleport.com/download.\n\n## Plugins\n\nDownload the current release of Teleport plugins from the links below.\n* Slack [Linux amd64](https://cdn.teleport.dev/teleport-access-slack-v17.7.26-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-slack-v17.7.26-linux-arm64-bin.tar.gz) \n* Mattermost [Linux amd64](https://cdn.teleport.dev/teleport-access-mattermost-v17.7.26-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-mattermost-v17.7.26-linux-arm64-bin.tar.gz)\n* Discord [Linux amd64](https://cdn.teleport.dev/teleport-access-discord-v17.7.26-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-discord-v17.7.26-linux-arm64-bin.tar.gz)\n* Terraform Provider [Linux amd64](https://cdn.teleport.dev/terraform-provider-teleport-v17.7.26-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/terraform-provider-teleport-v17.7.26-linux-arm64-bin.tar.gz) | [macOS amd64](https://cdn.teleport.dev/terraform-provider-teleport-v17.7.26-darwin-amd64-bin.tar.gz) | [macOS arm64](https://cdn.teleport.dev/terraform-provider-teleport-v17.7.26-darwin-arm64-bin.tar.gz) | [macOS universal](https://cdn.teleport.dev/terraform-provider-teleport-v17.7.26-darwin-universal-bin.tar.gz)\n* Event Handler [Linux amd64](https://cdn.teleport.dev/teleport-event-handler-v17.7.26-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-event-handler-v17.7.26-linux-arm64-bin.tar.gz) | [macOS amd64](https://cdn.teleport.dev/teleport-event-handler-v17.7.26-darwin-amd64-bin.tar.gz)\n* PagerDuty [Linux amd64](https://cdn.teleport.dev/teleport-access-pagerduty-v17.7.26-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-pagerduty-v17.7.26-linux-arm64-bin.tar.gz)\n* Jira [Linux amd64](https://cdn.teleport.dev/teleport-access-jira-v17.7.26-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-jira-v17.7.26-linux-arm64-bin.tar.gz)\n* Email [Linux amd64](https://cdn.teleport.dev/teleport-access-email-v17.7.26-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-email-v17.7.26-linux-arm64-bin.tar.gz)\n* Microsoft Teams [Linux amd64](https://cdn.teleport.dev/teleport-access-msteams-v17.7.26-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-msteams-v17.7.26-linux-arm64-bin.tar.gz)\n"},{"url":"https://api.github.com/repos/gravitational/teleport/releases/343135488","assets_url":"https://api.github.com/repos/gravitational/teleport/releases/343135488/assets","upload_url":"https://uploads.github.com/repos/gravitational/teleport/releases/343135488/assets{?name,label}","html_url":"https://github.com/gravitational/teleport/releases/tag/v18.9.1","id":343135488,"author":{"login":"r0mant","id":339322,"node_id":"MDQ6VXNlcjMzOTMyMg==","avatar_url":"https://avatars.githubusercontent.com/u/339322?v=4","gravatar_id":"","url":"https://api.github.com/users/r0mant","html_url":"https://github.com/r0mant","followers_url":"https://api.github.com/users/r0mant/followers","following_url":"https://api.github.com/users/r0mant/following{/other_user}","gists_url":"https://api.github.com/users/r0mant/gists{/gist_id}","starred_url":"https://api.github.com/users/r0mant/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/r0mant/subscriptions","organizations_url":"https://api.github.com/users/r0mant/orgs","repos_url":"https://api.github.com/users/r0mant/repos","events_url":"https://api.github.com/users/r0mant/events{/privacy}","received_events_url":"https://api.github.com/users/r0mant/received_events","type":"User","user_view_type":"public","site_admin":false},"node_id":"RE_kwDOAeGNGc4Uc9UA","tag_name":"v18.9.1","target_commitish":"master","name":"Teleport 18.9.1","draft":false,"immutable":false,"prerelease":false,"created_at":"2026-06-19T19:33:32Z","updated_at":"2026-06-22T20:03:45Z","published_at":"2026-06-22T20:03:45Z","assets":[],"tarball_url":"https://api.github.com/repos/gravitational/teleport/tarball/v18.9.1","zipball_url":"https://api.github.com/repos/gravitational/teleport/zipball/v18.9.1","body":"## Description\n\n* Fixed a limitation in Kubernetes Access causing the agent to throttle at 5 exec/second.\n\n## Download\n\nDownload the current and previous releases of Teleport at https://goteleport.com/download.\n\n## Plugins\n\nDownload the current release of Teleport plugins from the links below.\n* Slack [Linux amd64](https://cdn.teleport.dev/teleport-access-slack-v18.9.1-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-slack-v18.9.1-linux-arm64-bin.tar.gz) \n* Mattermost [Linux amd64](https://cdn.teleport.dev/teleport-access-mattermost-v18.9.1-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-mattermost-v18.9.1-linux-arm64-bin.tar.gz)\n* Discord [Linux amd64](https://cdn.teleport.dev/teleport-access-discord-v18.9.1-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-discord-v18.9.1-linux-arm64-bin.tar.gz)\n* Terraform Provider [Linux amd64](https://cdn.teleport.dev/terraform-provider-teleport-v18.9.1-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/terraform-provider-teleport-v18.9.1-linux-arm64-bin.tar.gz) | [macOS amd64](https://cdn.teleport.dev/terraform-provider-teleport-v18.9.1-darwin-amd64-bin.tar.gz) | [macOS arm64](https://cdn.teleport.dev/terraform-provider-teleport-v18.9.1-darwin-arm64-bin.tar.gz) | [macOS universal](https://cdn.teleport.dev/terraform-provider-teleport-v18.9.1-darwin-universal-bin.tar.gz)\n* Event Handler [Linux amd64](https://cdn.teleport.dev/teleport-event-handler-v18.9.1-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-event-handler-v18.9.1-linux-arm64-bin.tar.gz) | [macOS amd64](https://cdn.teleport.dev/teleport-event-handler-v18.9.1-darwin-amd64-bin.tar.gz)\n* PagerDuty [Linux amd64](https://cdn.teleport.dev/teleport-access-pagerduty-v18.9.1-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-pagerduty-v18.9.1-linux-arm64-bin.tar.gz)\n* Jira [Linux amd64](https://cdn.teleport.dev/teleport-access-jira-v18.9.1-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-jira-v18.9.1-linux-arm64-bin.tar.gz)\n* Email [Linux amd64](https://cdn.teleport.dev/teleport-access-email-v18.9.1-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-email-v18.9.1-linux-arm64-bin.tar.gz)\n* Microsoft Teams [Linux amd64](https://cdn.teleport.dev/teleport-access-msteams-v18.9.1-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-msteams-v18.9.1-linux-arm64-bin.tar.gz)\n"},{"url":"https://api.github.com/repos/gravitational/teleport/releases/341104384","assets_url":"https://api.github.com/repos/gravitational/teleport/releases/341104384/assets","upload_url":"https://uploads.github.com/repos/gravitational/teleport/releases/341104384/assets{?name,label}","html_url":"https://github.com/gravitational/teleport/releases/tag/v18.9.0","id":341104384,"author":{"login":"r0mant","id":339322,"node_id":"MDQ6VXNlcjMzOTMyMg==","avatar_url":"https://avatars.githubusercontent.com/u/339322?v=4","gravatar_id":"","url":"https://api.github.com/users/r0mant","html_url":"https://github.com/r0mant","followers_url":"https://api.github.com/users/r0mant/followers","following_url":"https://api.github.com/users/r0mant/following{/other_user}","gists_url":"https://api.github.com/users/r0mant/gists{/gist_id}","starred_url":"https://api.github.com/users/r0mant/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/r0mant/subscriptions","organizations_url":"https://api.github.com/users/r0mant/orgs","repos_url":"https://api.github.com/users/r0mant/repos","events_url":"https://api.github.com/users/r0mant/events{/privacy}","received_events_url":"https://api.github.com/users/r0mant/received_events","type":"User","user_view_type":"public","site_admin":false},"node_id":"RE_kwDOAeGNGc4UVNcA","tag_name":"v18.9.0","target_commitish":"master","name":"Teleport 18.9.0","draft":false,"immutable":false,"prerelease":false,"created_at":"2026-06-17T08:19:04Z","updated_at":"2026-06-18T00:19:58Z","published_at":"2026-06-18T00:19:58Z","assets":[],"tarball_url":"https://api.github.com/repos/gravitational/teleport/tarball/v18.9.0","zipball_url":"https://api.github.com/repos/gravitational/teleport/zipball/v18.9.0","body":"## Description\n\n### Device Bound Session Credentials for App Access\n\nApplication access session cookies are now compatible with Google&#39;s Device Bound\nSession Credentials, adding a layer of protection against session hijacking and\ncookie theft.\n\n### High-DPI support for Windows desktop sessions\n\nRemote desktop sessions now support high-DPI mode, improving the clarity and\nquality of the display rendering on supported displays.\n\n### Sub-CA\n\nTeleport now supports operating as a sub-CA of an external root for the Windows\nDesktop and Database Client CAs. Subsequent releases will extend support for\nother CAs.\n\n### Other fixes and improvements\n\n* Outdated agents joining via the legacy Auth HTTP endpoint now receive an explicit &#34;client too old&#34; error instead of a confusing 404. [#67532](https://github.com/gravitational/teleport/pull/67532)\n* Rename --from/--to to --from-utc/--to-utc on `recordings search` to match the `recordings ls` flag naming convention. [#67502](https://github.com/gravitational/teleport/pull/67502)\n* Improved performance and reduced resource usage of the auth service for clusters with large numbers of registered applications with per-session MFA enabled. [#67471](https://github.com/gravitational/teleport/pull/67471)\n* Prevented ssh users from being able to cancel other users&#39; remote port forwards. [#67442](https://github.com/gravitational/teleport/pull/67442)\n* Improved application server resolution times for large number of applications. [#62585](https://github.com/gravitational/teleport/pull/62585)\n\n## Download\n\nDownload the current and previous releases of Teleport at https://goteleport.com/download.\n\n## Plugins\n\nDownload the current release of Teleport plugins from the links below.\n* Slack [Linux amd64](https://cdn.teleport.dev/teleport-access-slack-v18.9.0-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-slack-v18.9.0-linux-arm64-bin.tar.gz) \n* Mattermost [Linux amd64](https://cdn.teleport.dev/teleport-access-mattermost-v18.9.0-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-mattermost-v18.9.0-linux-arm64-bin.tar.gz)\n* Discord [Linux amd64](https://cdn.teleport.dev/teleport-access-discord-v18.9.0-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-discord-v18.9.0-linux-arm64-bin.tar.gz)\n* Terraform Provider [Linux amd64](https://cdn.teleport.dev/terraform-provider-teleport-v18.9.0-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/terraform-provider-teleport-v18.9.0-linux-arm64-bin.tar.gz) | [macOS amd64](https://cdn.teleport.dev/terraform-provider-teleport-v18.9.0-darwin-amd64-bin.tar.gz) | [macOS arm64](https://cdn.teleport.dev/terraform-provider-teleport-v18.9.0-darwin-arm64-bin.tar.gz) | [macOS universal](https://cdn.teleport.dev/terraform-provider-teleport-v18.9.0-darwin-universal-bin.tar.gz)\n* Event Handler [Linux amd64](https://cdn.teleport.dev/teleport-event-handler-v18.9.0-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-event-handler-v18.9.0-linux-arm64-bin.tar.gz) | [macOS amd64](https://cdn.teleport.dev/teleport-event-handler-v18.9.0-darwin-amd64-bin.tar.gz)\n* PagerDuty [Linux amd64](https://cdn.teleport.dev/teleport-access-pagerduty-v18.9.0-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-pagerduty-v18.9.0-linux-arm64-bin.tar.gz)\n* Jira [Linux amd64](https://cdn.teleport.dev/teleport-access-jira-v18.9.0-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-jira-v18.9.0-linux-arm64-bin.tar.gz)\n* Email [Linux amd64](https://cdn.teleport.dev/teleport-access-email-v18.9.0-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-email-v18.9.0-linux-arm64-bin.tar.gz)\n* Microsoft Teams [Linux amd64](https://cdn.teleport.dev/teleport-access-msteams-v18.9.0-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-msteams-v18.9.0-linux-arm64-bin.tar.gz)\n"},{"url":"https://api.github.com/repos/gravitational/teleport/releases/336805608","assets_url":"https://api.github.com/repos/gravitational/teleport/releases/336805608/assets","upload_url":"https://uploads.github.com/repos/gravitational/teleport/releases/336805608/assets{?name,label}","html_url":"https://github.com/gravitational/teleport/releases/tag/v17.7.25","id":336805608,"author":{"login":"mjsmithnh","id":4805850,"node_id":"MDQ6VXNlcjQ4MDU4NTA=","avatar_url":"https://avatars.githubusercontent.com/u/4805850?v=4","gravatar_id":"","url":"https://api.github.com/users/mjsmithnh","html_url":"https://github.com/mjsmithnh","followers_url":"https://api.github.com/users/mjsmithnh/followers","following_url":"https://api.github.com/users/mjsmithnh/following{/other_user}","gists_url":"https://api.github.com/users/mjsmithnh/gists{/gist_id}","starred_url":"https://api.github.com/users/mjsmithnh/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mjsmithnh/subscriptions","organizations_url":"https://api.github.com/users/mjsmithnh/orgs","repos_url":"https://api.github.com/users/mjsmithnh/repos","events_url":"https://api.github.com/users/mjsmithnh/events{/privacy}","received_events_url":"https://api.github.com/users/mjsmithnh/received_events","type":"User","user_view_type":"public","site_admin":false},"node_id":"RE_kwDOAeGNGc4UEz7o","tag_name":"v17.7.25","target_commitish":"master","name":"Teleport 17.7.25","draft":false,"immutable":false,"prerelease":false,"created_at":"2026-06-09T15:00:06Z","updated_at":"2026-06-09T18:49:09Z","published_at":"2026-06-09T18:49:09Z","assets":[],"tarball_url":"https://api.github.com/repos/gravitational/teleport/tarball/v17.7.25","zipball_url":"https://api.github.com/repos/gravitational/teleport/zipball/v17.7.25","body":"## Description\n\n* Fixed minor formatting bug on `tsh request show` output. [#67446](https://github.com/gravitational/teleport/pull/67446)\n* Prevented ssh users from being able to cancel other users&#39; remote port forwards. [#67443](https://github.com/gravitational/teleport/pull/67443)\n* Updated Go to 1.25.11. [#67422](https://github.com/gravitational/teleport/pull/67422)\n* Fixed &#34;error gathering metrics&#34; log spam. [#67352](https://github.com/gravitational/teleport/pull/67352)\n\n## Download\n\nDownload the current and previous releases of Teleport at https://goteleport.com/download.\n\n## Plugins\n\nDownload the current release of Teleport plugins from the links below.\n* Slack [Linux amd64](https://cdn.teleport.dev/teleport-access-slack-v17.7.25-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-slack-v17.7.25-linux-arm64-bin.tar.gz) \n* Mattermost [Linux amd64](https://cdn.teleport.dev/teleport-access-mattermost-v17.7.25-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-mattermost-v17.7.25-linux-arm64-bin.tar.gz)\n* Discord [Linux amd64](https://cdn.teleport.dev/teleport-access-discord-v17.7.25-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-discord-v17.7.25-linux-arm64-bin.tar.gz)\n* Terraform Provider [Linux amd64](https://cdn.teleport.dev/terraform-provider-teleport-v17.7.25-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/terraform-provider-teleport-v17.7.25-linux-arm64-bin.tar.gz) | [macOS amd64](https://cdn.teleport.dev/terraform-provider-teleport-v17.7.25-darwin-amd64-bin.tar.gz) | [macOS arm64](https://cdn.teleport.dev/terraform-provider-teleport-v17.7.25-darwin-arm64-bin.tar.gz) | [macOS universal](https://cdn.teleport.dev/terraform-provider-teleport-v17.7.25-darwin-universal-bin.tar.gz)\n* Event Handler [Linux amd64](https://cdn.teleport.dev/teleport-event-handler-v17.7.25-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-event-handler-v17.7.25-linux-arm64-bin.tar.gz) | [macOS amd64](https://cdn.teleport.dev/teleport-event-handler-v17.7.25-darwin-amd64-bin.tar.gz)\n* PagerDuty [Linux amd64](https://cdn.teleport.dev/teleport-access-pagerduty-v17.7.25-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-pagerduty-v17.7.25-linux-arm64-bin.tar.gz)\n* Jira [Linux amd64](https://cdn.teleport.dev/teleport-access-jira-v17.7.25-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-jira-v17.7.25-linux-arm64-bin.tar.gz)\n* Email [Linux amd64](https://cdn.teleport.dev/teleport-access-email-v17.7.25-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-email-v17.7.25-linux-arm64-bin.tar.gz)\n* Microsoft Teams [Linux amd64](https://cdn.teleport.dev/teleport-access-msteams-v17.7.25-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-msteams-v17.7.25-linux-arm64-bin.tar.gz)\n","reactions":{"url":"https://api.github.com/repos/gravitational/teleport/releases/336805608/reactions","total_count":1,"+1":0,"-1":0,"laugh":0,"hooray":1,"confused":0,"heart":0,"rocket":0,"eyes":0}},{"url":"https://api.github.com/repos/gravitational/teleport/releases/336304934","assets_url":"https://api.github.com/repos/gravitational/teleport/releases/336304934/assets","upload_url":"https://uploads.github.com/repos/gravitational/teleport/releases/336304934/assets{?name,label}","html_url":"https://github.com/gravitational/teleport/releases/tag/v18.9.0-rc.2","id":336304934,"author":{"login":"r0mant","id":339322,"node_id":"MDQ6VXNlcjMzOTMyMg==","avatar_url":"https://avatars.githubusercontent.com/u/339322?v=4","gravatar_id":"","url":"https://api.github.com/users/r0mant","html_url":"https://github.com/r0mant","followers_url":"https://api.github.com/users/r0mant/followers","following_url":"https://api.github.com/users/r0mant/following{/other_user}","gists_url":"https://api.github.com/users/r0mant/gists{/gist_id}","starred_url":"https://api.github.com/users/r0mant/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/r0mant/subscriptions","organizations_url":"https://api.github.com/users/r0mant/orgs","repos_url":"https://api.github.com/users/r0mant/repos","events_url":"https://api.github.com/users/r0mant/events{/privacy}","received_events_url":"https://api.github.com/users/r0mant/received_events","type":"User","user_view_type":"public","site_admin":false},"node_id":"RE_kwDOAeGNGc4UC5sm","tag_name":"v18.9.0-rc.2","target_commitish":"master","name":"Teleport 18.9.0-rc.2","draft":false,"immutable":false,"prerelease":true,"created_at":"2026-06-08T19:47:51Z","updated_at":"2026-06-09T00:58:32Z","published_at":"2026-06-09T00:58:32Z","assets":[],"tarball_url":"https://api.github.com/repos/gravitational/teleport/tarball/v18.9.0-rc.2","zipball_url":"https://api.github.com/repos/gravitational/teleport/zipball/v18.9.0-rc.2","body":"## Warning\r\n\r\nPre-releases are not production ready, use at your own risk!\r\n\r\n## Download\r\n\r\nDownload the current and previous stable releases of Teleport at https://goteleport.com/download.","reactions":{"url":"https://api.github.com/repos/gravitational/teleport/releases/336304934/reactions","total_count":1,"+1":0,"-1":0,"laugh":0,"hooray":1,"confused":0,"heart":0,"rocket":0,"eyes":0}},{"url":"https://api.github.com/repos/gravitational/teleport/releases/334950369","assets_url":"https://api.github.com/repos/gravitational/teleport/releases/334950369/assets","upload_url":"https://uploads.github.com/repos/gravitational/teleport/releases/334950369/assets{?name,label}","html_url":"https://github.com/gravitational/teleport/releases/tag/v18.8.3","id":334950369,"author":{"login":"mjsmithnh","id":4805850,"node_id":"MDQ6VXNlcjQ4MDU4NTA=","avatar_url":"https://avatars.githubusercontent.com/u/4805850?v=4","gravatar_id":"","url":"https://api.github.com/users/mjsmithnh","html_url":"https://github.com/mjsmithnh","followers_url":"https://api.github.com/users/mjsmithnh/followers","following_url":"https://api.github.com/users/mjsmithnh/following{/other_user}","gists_url":"https://api.github.com/users/mjsmithnh/gists{/gist_id}","starred_url":"https://api.github.com/users/mjsmithnh/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mjsmithnh/subscriptions","organizations_url":"https://api.github.com/users/mjsmithnh/orgs","repos_url":"https://api.github.com/users/mjsmithnh/repos","events_url":"https://api.github.com/users/mjsmithnh/events{/privacy}","received_events_url":"https://api.github.com/users/mjsmithnh/received_events","type":"User","user_view_type":"public","site_admin":false},"node_id":"RE_kwDOAeGNGc4T9u_h","tag_name":"v18.8.3","target_commitish":"master","name":"Teleport 18.8.3","draft":false,"immutable":false,"prerelease":false,"created_at":"2026-06-04T19:39:40Z","updated_at":"2026-06-05T13:42:35Z","published_at":"2026-06-05T13:42:35Z","assets":[],"tarball_url":"https://api.github.com/repos/gravitational/teleport/tarball/v18.8.3","zipball_url":"https://api.github.com/repos/gravitational/teleport/zipball/v18.8.3","body":"## Description\n\n* Fixed minor formatting bug on `tsh request show` output. [#67447](https://github.com/gravitational/teleport/pull/67447)\n* The embedded session helper functionality introduced in v18.8.0 to improve memory usage and latency of SSH sessions is now disabled by default due to incompatibility with some endpoint protection services. It can be enabled by setting the `TELEPORT_UNSTABLE_DISABLE_EMBEDDED_REEXEC` envvar to `no`. [#67430](https://github.com/gravitational/teleport/pull/67430)\n* Updated Go to 1.25.11. [#67421](https://github.com/gravitational/teleport/pull/67421)\n* Improved notification messaging for Slack and Discord access plugins. [#67415](https://github.com/gravitational/teleport/pull/67415)\n* Added support for auto discovering VMs deployed in uniform Azure VM Scale Sets to terraform modules used in Auto Discovery. [#67323](https://github.com/gravitational/teleport/pull/67323)\n* Added secret lookup support for `TeleportOIDCConnector.spec.google_service_account` to the Teleport Kubernetes Operator. [#67309](https://github.com/gravitational/teleport/pull/67309)\n* Improved the latency of SSH agent forwarding used by multiple clients at once. [#67305](https://github.com/gravitational/teleport/pull/67305)\n* Tightened signature handling in Device Trust challenge/response validation. [#67302](https://github.com/gravitational/teleport/pull/67302)\n* Added `web_terminal_clipboard_mode` role option to restrict copying text from a web terminal SSH session. [#67276](https://github.com/gravitational/teleport/pull/67276)\n* Improved performance and reduced resource usage of the auth service for clusters with large numbers of registered Kubernetes clusters with per-session MFA enabled. [#67203](https://github.com/gravitational/teleport/pull/67203)\n* Fixed an issue where generated installer scripts could incorrectly escape special characters in some values. [#67191](https://github.com/gravitational/teleport/pull/67191)\n* Fixed a bug in Teleport Connect where the last terminal input could be logged to `renderer.log` if the terminal closed on its own — for example, when a `tsh ssh` session is dropped by the remote side (idle timeout, network disconnection) after the user pasted content but before they pressed Enter. [#67172](https://github.com/gravitational/teleport/pull/67172)\n* Fixed a Enhanced Session Recording bug in proxy recording mode that caused Teleport Nodes to stop emitting BPF events. [#67155](https://github.com/gravitational/teleport/pull/67155)\n* Fixed the `teleport-kube-agent` updater not honouring the `podSecurityContext` value. [#67097](https://github.com/gravitational/teleport/pull/67097)\n* Fixed device trust for remote users connecting to a trusted cluster. [#67031](https://github.com/gravitational/teleport/pull/67031)\n* Improved performance and reduced resource usage of the auth service for clusters with large numbers of registered databases with per-session MFA enabled. [#67029](https://github.com/gravitational/teleport/pull/67029)\n* NOCL: [v18] Bump github.com/containerd/containerd from 1.7.30 to 1.7.32 [#67007](https://github.com/gravitational/teleport/pull/67007)\n* Reduced peak memory usage of SSH target resolution in Auth service instances. [#67005](https://github.com/gravitational/teleport/pull/67005)\n* Introduced `tsh workload-identity issue-jwt` command for human issuance of JWT-SVIDs. [#66995](https://github.com/gravitational/teleport/pull/66995)\n* Improved the reliability of clipboard sharing for remote desktop sessions in both Teleport Connect and browsers running Chrome 144&#43;. [#66979](https://github.com/gravitational/teleport/pull/66979)\n* Fixed a TLS certificate error that prevented users from connecting to Amazon Keyspaces databases through Teleport. [#66974](https://github.com/gravitational/teleport/pull/66974)\n* Tightened default permission when creating AWS configuration files. [#66941](https://github.com/gravitational/teleport/pull/66941)\n* Stopped traversing symlinks and allowing relative paths in moderated file transfers. [#66796](https://github.com/gravitational/teleport/pull/66796)\n* Added `identity/key-agent` service to enable `tbot` to generate un-exfiltratable credentials. [#66701](https://github.com/gravitational/teleport/pull/66701)\n* Reduced unnecessary S3 uploads for Athena audit log deployments that publish directly to SQS by applying the correct SQS message size limit when the client has `sqs:GetQueueAttributes` permission, instead of always using the 256 KB SNS limit. [#66532](https://github.com/gravitational/teleport/pull/66532)\n* Combined passkeys and MFA devices into one list on the account settings page. [#66435](https://github.com/gravitational/teleport/pull/66435)\n* Added support for allowing or denying AWS IAM join attempts using the account&#39;s Organizational Units in their current Organization. [#66276](https://github.com/gravitational/teleport/pull/66276)\n* Fixed a fatal connection error that occurs in Windows Desktop sessions when attempting to create a file larger than 4GiB within a shared directory. [#65478](https://github.com/gravitational/teleport/pull/65478)\n\nEnterprise:\n* Fixed regresion where users added to an Okta group via SCIM were silently dropped when the Okta integration was configured in read-only mode with SCIM enabled.\n* SCIM-synced access lists will now have a badge displayed next to them in the web UI.\n* Fixed a bug that could cause panics in Teleport&#39;s SAML IdP during failure scenarios.\n\n## Download\n\nDownload the current and previous releases of Teleport at https://goteleport.com/download.\n\n## Plugins\n\nDownload the current release of Teleport plugins from the links below.\n* Slack [Linux amd64](https://cdn.teleport.dev/teleport-access-slack-v18.8.3-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-slack-v18.8.3-linux-arm64-bin.tar.gz) \n* Mattermost [Linux amd64](https://cdn.teleport.dev/teleport-access-mattermost-v18.8.3-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-mattermost-v18.8.3-linux-arm64-bin.tar.gz)\n* Discord [Linux amd64](https://cdn.teleport.dev/teleport-access-discord-v18.8.3-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-discord-v18.8.3-linux-arm64-bin.tar.gz)\n* Terraform Provider [Linux amd64](https://cdn.teleport.dev/terraform-provider-teleport-v18.8.3-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/terraform-provider-teleport-v18.8.3-linux-arm64-bin.tar.gz) | [macOS amd64](https://cdn.teleport.dev/terraform-provider-teleport-v18.8.3-darwin-amd64-bin.tar.gz) | [macOS arm64](https://cdn.teleport.dev/terraform-provider-teleport-v18.8.3-darwin-arm64-bin.tar.gz) | [macOS universal](https://cdn.teleport.dev/terraform-provider-teleport-v18.8.3-darwin-universal-bin.tar.gz)\n* Event Handler [Linux amd64](https://cdn.teleport.dev/teleport-event-handler-v18.8.3-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-event-handler-v18.8.3-linux-arm64-bin.tar.gz) | [macOS amd64](https://cdn.teleport.dev/teleport-event-handler-v18.8.3-darwin-amd64-bin.tar.gz)\n* PagerDuty [Linux amd64](https://cdn.teleport.dev/teleport-access-pagerduty-v18.8.3-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-pagerduty-v18.8.3-linux-arm64-bin.tar.gz)\n* Jira [Linux amd64](https://cdn.teleport.dev/teleport-access-jira-v18.8.3-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-jira-v18.8.3-linux-arm64-bin.tar.gz)\n* Email [Linux amd64](https://cdn.teleport.dev/teleport-access-email-v18.8.3-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-email-v18.8.3-linux-arm64-bin.tar.gz)\n* Microsoft Teams [Linux amd64](https://cdn.teleport.dev/teleport-access-msteams-v18.8.3-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-msteams-v18.8.3-linux-arm64-bin.tar.gz)\n","reactions":{"url":"https://api.github.com/repos/gravitational/teleport/releases/334950369/reactions","total_count":1,"+1":0,"-1":0,"laugh":0,"hooray":1,"confused":0,"heart":0,"rocket":0,"eyes":0}},{"url":"https://api.github.com/repos/gravitational/teleport/releases/332878844","assets_url":"https://api.github.com/repos/gravitational/teleport/releases/332878844/assets","upload_url":"https://uploads.github.com/repos/gravitational/teleport/releases/332878844/assets{?name,label}","html_url":"https://github.com/gravitational/teleport/releases/tag/v17.7.24","id":332878844,"author":{"login":"doggydogworld","id":29820606,"node_id":"MDQ6VXNlcjI5ODIwNjA2","avatar_url":"https://avatars.githubusercontent.com/u/29820606?v=4","gravatar_id":"","url":"https://api.github.com/users/doggydogworld","html_url":"https://github.com/doggydogworld","followers_url":"https://api.github.com/users/doggydogworld/followers","following_url":"https://api.github.com/users/doggydogworld/following{/other_user}","gists_url":"https://api.github.com/users/doggydogworld/gists{/gist_id}","starred_url":"https://api.github.com/users/doggydogworld/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/doggydogworld/subscriptions","organizations_url":"https://api.github.com/users/doggydogworld/orgs","repos_url":"https://api.github.com/users/doggydogworld/repos","events_url":"https://api.github.com/users/doggydogworld/events{/privacy}","received_events_url":"https://api.github.com/users/doggydogworld/received_events","type":"User","user_view_type":"public","site_admin":false},"node_id":"RE_kwDOAeGNGc4T11P8","tag_name":"v17.7.24","target_commitish":"master","name":"Teleport 17.7.24","draft":false,"immutable":false,"prerelease":false,"created_at":"2026-06-01T21:49:26Z","updated_at":"2026-06-02T03:20:27Z","published_at":"2026-06-02T03:20:27Z","assets":[],"tarball_url":"https://api.github.com/repos/gravitational/teleport/tarball/v17.7.24","zipball_url":"https://api.github.com/repos/gravitational/teleport/zipball/v17.7.24","body":"## Description\n\n* Fixed an issue where generated installer scripts could incorrectly escape special characters in some values. [#67192](https://github.com/gravitational/teleport/pull/67192)\n* Fixed a bug in Teleport Connect where the last terminal input could be logged to `renderer.log` if the terminal closed on its own — for example, when a `tsh ssh` session is dropped by the remote side (idle timeout, network disconnection) after the user pasted content but before they pressed Enter. [#67173](https://github.com/gravitational/teleport/pull/67173)\n* Fixes an issue preventing joins using the azure join method in regions where the trust chain has been updated with an additional intermediate. [#67140](https://github.com/gravitational/teleport/pull/67140)\n* Fix device trust for remote users connecting to a trusted cluster. [#67032](https://github.com/gravitational/teleport/pull/67032)\n* Fixed a TLS certificate error that prevented users from connecting to Amazon Keyspaces databases through Teleport. [#66975](https://github.com/gravitational/teleport/pull/66975)\n* Fixed an issue where Windows desktop LDAP discovery could conflict with dynamic registration causing desktops to be removed from the cluster. [#66802](https://github.com/gravitational/teleport/pull/66802)\n* Improved the error message on login in tsh and Teleport Connect when `/webapi/ping` returns a non-200 response. [#66713](https://github.com/gravitational/teleport/pull/66713)\n* Raise the app access upstream response-header cap from 5 minutes to 1 hour so long-running HTTP requests complete. [#66686](https://github.com/gravitational/teleport/pull/66686)\n* Updated Go to 1.25.10. [#66570](https://github.com/gravitational/teleport/pull/66570)\n* Improved the performance of VNet on macOS by eliminating unnecessary reconnects. [#66561](https://github.com/gravitational/teleport/pull/66561)\n* Reduced unnecessary S3 uploads for Athena audit log deployments that publish directly to SQS by applying the correct SQS message size limit when the client has `sqs:GetQueueAttributes` permission, instead of always using the 256 KB SNS limit. [#66533](https://github.com/gravitational/teleport/pull/66533)\n* Improved Teleport Connect startup reliability on Windows. [#66510](https://github.com/gravitational/teleport/pull/66510)\n* Hardened event handler so it recovers in case of malformed session ID or corrupted data directory. [#66472](https://github.com/gravitational/teleport/pull/66472)\n* Fixed app access dropping URL fragments through the auth redirect flow. [#66461](https://github.com/gravitational/teleport/pull/66461)\n* Fixed an issue preventing host sudoers entries from being written on newer Linux distributions (i.e. Ubuntu 25.10) using sudo-rs. [#66434](https://github.com/gravitational/teleport/pull/66434)\n* Fixed an issue that could cause LDAP discovery to fail when a single desktop service discovers large numbers of hosts. [#66400](https://github.com/gravitational/teleport/pull/66400)\n* Fixed a rare input swallowing bug when resuming a moderated Node session. [#66369](https://github.com/gravitational/teleport/pull/66369)\n* Fixed possible unavailability of Proxy service instances as a result of some API errors. [#66313](https://github.com/gravitational/teleport/pull/66313)\n\nEnterprise:\n* Enterprise licenses with a devices limit for device trust can now enroll unlimited devices.\n* Fixed a bug that could cause panics in Teleport&#39;s SAML IdP during failure scenarios.\n\n## Download\n\nDownload the current and previous releases of Teleport at https://goteleport.com/download.\n\n## Plugins\n\nDownload the current release of Teleport plugins from the links below.\n* Slack [Linux amd64](https://cdn.teleport.dev/teleport-access-slack-v17.7.24-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-slack-v17.7.24-linux-arm64-bin.tar.gz) \n* Mattermost [Linux amd64](https://cdn.teleport.dev/teleport-access-mattermost-v17.7.24-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-mattermost-v17.7.24-linux-arm64-bin.tar.gz)\n* Discord [Linux amd64](https://cdn.teleport.dev/teleport-access-discord-v17.7.24-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-discord-v17.7.24-linux-arm64-bin.tar.gz)\n* Terraform Provider [Linux amd64](https://cdn.teleport.dev/terraform-provider-teleport-v17.7.24-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/terraform-provider-teleport-v17.7.24-linux-arm64-bin.tar.gz) | [macOS amd64](https://cdn.teleport.dev/terraform-provider-teleport-v17.7.24-darwin-amd64-bin.tar.gz) | [macOS arm64](https://cdn.teleport.dev/terraform-provider-teleport-v17.7.24-darwin-arm64-bin.tar.gz) | [macOS universal](https://cdn.teleport.dev/terraform-provider-teleport-v17.7.24-darwin-universal-bin.tar.gz)\n* Event Handler [Linux amd64](https://cdn.teleport.dev/teleport-event-handler-v17.7.24-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-event-handler-v17.7.24-linux-arm64-bin.tar.gz) | [macOS amd64](https://cdn.teleport.dev/teleport-event-handler-v17.7.24-darwin-amd64-bin.tar.gz)\n* PagerDuty [Linux amd64](https://cdn.teleport.dev/teleport-access-pagerduty-v17.7.24-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-pagerduty-v17.7.24-linux-arm64-bin.tar.gz)\n* Jira [Linux amd64](https://cdn.teleport.dev/teleport-access-jira-v17.7.24-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-jira-v17.7.24-linux-arm64-bin.tar.gz)\n* Email [Linux amd64](https://cdn.teleport.dev/teleport-access-email-v17.7.24-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-email-v17.7.24-linux-arm64-bin.tar.gz)\n* Microsoft Teams [Linux amd64](https://cdn.teleport.dev/teleport-access-msteams-v17.7.24-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-msteams-v17.7.24-linux-arm64-bin.tar.gz)\n","reactions":{"url":"https://api.github.com/repos/gravitational/teleport/releases/332878844/reactions","total_count":1,"+1":0,"-1":0,"laugh":0,"hooray":1,"confused":0,"heart":0,"rocket":0,"eyes":0}},{"url":"https://api.github.com/repos/gravitational/teleport/releases/328053187","assets_url":"https://api.github.com/repos/gravitational/teleport/releases/328053187/assets","upload_url":"https://uploads.github.com/repos/gravitational/teleport/releases/328053187/assets{?name,label}","html_url":"https://github.com/gravitational/teleport/releases/tag/v18.8.2","id":328053187,"author":{"login":"aadc-dev","id":215184129,"node_id":"U_kgDODNNzAQ","avatar_url":"https://avatars.githubusercontent.com/u/215184129?v=4","gravatar_id":"","url":"https://api.github.com/users/aadc-dev","html_url":"https://github.com/aadc-dev","followers_url":"https://api.github.com/users/aadc-dev/followers","following_url":"https://api.github.com/users/aadc-dev/following{/other_user}","gists_url":"https://api.github.com/users/aadc-dev/gists{/gist_id}","starred_url":"https://api.github.com/users/aadc-dev/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/aadc-dev/subscriptions","organizations_url":"https://api.github.com/users/aadc-dev/orgs","repos_url":"https://api.github.com/users/aadc-dev/repos","events_url":"https://api.github.com/users/aadc-dev/events{/privacy}","received_events_url":"https://api.github.com/users/aadc-dev/received_events","type":"User","user_view_type":"public","site_admin":false},"node_id":"RE_kwDOAeGNGc4TjbHD","tag_name":"v18.8.2","target_commitish":"master","name":"Teleport 18.8.2","draft":false,"immutable":false,"prerelease":false,"created_at":"2026-05-22T15:12:07Z","updated_at":"2026-05-22T17:35:34Z","published_at":"2026-05-22T17:35:34Z","assets":[],"tarball_url":"https://api.github.com/repos/gravitational/teleport/tarball/v18.8.2","zipball_url":"https://api.github.com/repos/gravitational/teleport/zipball/v18.8.2","body":"## Description\n\n* Fixed `tsh aws`, `tsh gcp`, `tsh azure`, and `tsh proxy app` failing with certificate errors. [#66962](https://github.com/gravitational/teleport/pull/66962)\n* Fixed a regression introduced in v18.7.6 affecting connectivity to resources via approved just-in-time resource access requests when the cluster is running agents older than v18.7.6. [#66933](https://github.com/gravitational/teleport/pull/66933)\n* Teleport Connect now remembers recently used clusters after logout. [#66781](https://github.com/gravitational/teleport/pull/66781)\n* Fixed an issue where Windows desktop LDAP discovery could conflict with dynamic registration causing desktops to be removed from the cluster. [#66743](https://github.com/gravitational/teleport/pull/66743)\n* Windows desktop controls in Teleport Connect now reside in the status bar in order to allocate more screen real estate to the RDP session. [#66726](https://github.com/gravitational/teleport/pull/66726)\n\nEnterprise:\n* SCIM-synced access lists will now have a badge displayed next to them in the web UI.\n* Fixed access monitoring graph data handling in the Web UI when the amount of results exceeds the display maximum - now hides earlier instead of later data.\n* Restricted user traits preserved during a SAML logon to those created by the Okta or SCIM integrations.\n* Improved reliability of Okta assignments processing.\n\n## Download\n\nDownload the current and previous releases of Teleport at https://goteleport.com/download.\n\n## Plugins\n\nDownload the current release of Teleport plugins from the links below.\n* Slack [Linux amd64](https://cdn.teleport.dev/teleport-access-slack-v18.8.2-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-slack-v18.8.2-linux-arm64-bin.tar.gz) \n* Mattermost [Linux amd64](https://cdn.teleport.dev/teleport-access-mattermost-v18.8.2-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-mattermost-v18.8.2-linux-arm64-bin.tar.gz)\n* Discord [Linux amd64](https://cdn.teleport.dev/teleport-access-discord-v18.8.2-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-discord-v18.8.2-linux-arm64-bin.tar.gz)\n* Terraform Provider [Linux amd64](https://cdn.teleport.dev/terraform-provider-teleport-v18.8.2-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/terraform-provider-teleport-v18.8.2-linux-arm64-bin.tar.gz) | [macOS amd64](https://cdn.teleport.dev/terraform-provider-teleport-v18.8.2-darwin-amd64-bin.tar.gz) | [macOS arm64](https://cdn.teleport.dev/terraform-provider-teleport-v18.8.2-darwin-arm64-bin.tar.gz) | [macOS universal](https://cdn.teleport.dev/terraform-provider-teleport-v18.8.2-darwin-universal-bin.tar.gz)\n* Event Handler [Linux amd64](https://cdn.teleport.dev/teleport-event-handler-v18.8.2-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-event-handler-v18.8.2-linux-arm64-bin.tar.gz) | [macOS amd64](https://cdn.teleport.dev/teleport-event-handler-v18.8.2-darwin-amd64-bin.tar.gz)\n* PagerDuty [Linux amd64](https://cdn.teleport.dev/teleport-access-pagerduty-v18.8.2-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-pagerduty-v18.8.2-linux-arm64-bin.tar.gz)\n* Jira [Linux amd64](https://cdn.teleport.dev/teleport-access-jira-v18.8.2-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-jira-v18.8.2-linux-arm64-bin.tar.gz)\n* Email [Linux amd64](https://cdn.teleport.dev/teleport-access-email-v18.8.2-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-email-v18.8.2-linux-arm64-bin.tar.gz)\n* Microsoft Teams [Linux amd64](https://cdn.teleport.dev/teleport-access-msteams-v18.8.2-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-msteams-v18.8.2-linux-arm64-bin.tar.gz)\n","reactions":{"url":"https://api.github.com/repos/gravitational/teleport/releases/328053187/reactions","total_count":2,"+1":2,"-1":0,"laugh":0,"hooray":0,"confused":0,"heart":0,"rocket":0,"eyes":0}},{"url":"https://api.github.com/repos/gravitational/teleport/releases/323496304","assets_url":"https://api.github.com/repos/gravitational/teleport/releases/323496304/assets","upload_url":"https://uploads.github.com/repos/gravitational/teleport/releases/323496304/assets{?name,label}","html_url":"https://github.com/gravitational/teleport/releases/tag/v18.8.1","id":323496304,"author":{"login":"mjsmithnh","id":4805850,"node_id":"MDQ6VXNlcjQ4MDU4NTA=","avatar_url":"https://avatars.githubusercontent.com/u/4805850?v=4","gravatar_id":"","url":"https://api.github.com/users/mjsmithnh","html_url":"https://github.com/mjsmithnh","followers_url":"https://api.github.com/users/mjsmithnh/followers","following_url":"https://api.github.com/users/mjsmithnh/following{/other_user}","gists_url":"https://api.github.com/users/mjsmithnh/gists{/gist_id}","starred_url":"https://api.github.com/users/mjsmithnh/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mjsmithnh/subscriptions","organizations_url":"https://api.github.com/users/mjsmithnh/orgs","repos_url":"https://api.github.com/users/mjsmithnh/repos","events_url":"https://api.github.com/users/mjsmithnh/events{/privacy}","received_events_url":"https://api.github.com/users/mjsmithnh/received_events","type":"User","user_view_type":"public","site_admin":false},"node_id":"RE_kwDOAeGNGc4TSClw","tag_name":"v18.8.1","target_commitish":"master","name":"Teleport 18.8.1","draft":false,"immutable":false,"prerelease":false,"created_at":"2026-05-15T14:53:46Z","updated_at":"2026-05-20T20:47:39Z","published_at":"2026-05-15T21:23:14Z","assets":[],"tarball_url":"https://api.github.com/repos/gravitational/teleport/tarball/v18.8.1","zipball_url":"https://api.github.com/repos/gravitational/teleport/zipball/v18.8.1","body":"**Warning:** This release contains a regression that affects connectivity to resources via an approved just-in-time resource access request when the cluster is running agents older than v18.8.0.\r\n\r\nIf you use resource access requests and unable to ensure all agents are upgraded to v18.8.1 in tandem with auth and proxy, we recommend skipping this release and upgrading to v18.8.2 once it's available instead.\r\n\r\n## Description\r\n\r\n* Improved the performance of certain predicate expressions used to select SSH servers. [#66769](https://github.com/gravitational/teleport/pull/66769)\r\n* Fixes an issue preventing joins using the azure join method in regions where the trust chain has been updated with an additional intermediate. [#66764](https://github.com/gravitational/teleport/pull/66764)\r\n* Fix Teleport Connect&#39;s VNet failing to start on Linux when an older `tsh` is present at `/usr/local/bin/tsh`. [#66757](https://github.com/gravitational/teleport/pull/66757)\r\n* The MFA prompt now includes the name of a leaf cluster if the resource belongs to one. [#66741](https://github.com/gravitational/teleport/pull/66741)\r\n* When attempting to access a web app protected by Device Trust from an untrusted device, browsers now see a simple HTML page instead of a plain text response. [#66717](https://github.com/gravitational/teleport/pull/66717)\r\n* Improved the error message on login in tsh and Teleport Connect when `/webapi/ping` returns a non-200 response. [#66712](https://github.com/gravitational/teleport/pull/66712)\r\n* The kubernetes join method now supports allow rules targeting specific service account names and namespaces and supports wildcards when the new fields are used. [#66700](https://github.com/gravitational/teleport/pull/66700)\r\n* Raise the app access upstream response-header cap from 5 minutes to 1 hour so long-running HTTP requests complete. [#66687](https://github.com/gravitational/teleport/pull/66687)\r\n* Fixed an issue preventing host sudoers entries from being written on newer Linux distributions (i.e. Ubuntu 25.10) using sudo-rs. [#66433](https://github.com/gravitational/teleport/pull/66433)\r\n\r\nEnterprise:\r\n* Internal performance optimizations to the SCIM PATCH flow when multiple parallel PATCH requests target the same SCIM groups.\r\n* Fixed an issue with sessions failing to be summarized when using non-alternate buffer TUI applications.\r\n* Commands in the session summary timeline now show detected MITRE attack IDs and suspicious flags.\r\n* Fixed Web UI to no longer show audit review prompts or 0001-01-01 dates for static Access Lists.\r\n\r\n## Download\r\n\r\nDownload the current and previous releases of Teleport at https://goteleport.com/download.\r\n\r\n## Plugins\r\n\r\nDownload the current release of Teleport plugins from the links below.\r\n* Slack [Linux amd64](https://cdn.teleport.dev/teleport-access-slack-v18.8.1-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-slack-v18.8.1-linux-arm64-bin.tar.gz) \r\n* Mattermost [Linux amd64](https://cdn.teleport.dev/teleport-access-mattermost-v18.8.1-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-mattermost-v18.8.1-linux-arm64-bin.tar.gz)\r\n* Discord [Linux amd64](https://cdn.teleport.dev/teleport-access-discord-v18.8.1-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-discord-v18.8.1-linux-arm64-bin.tar.gz)\r\n* Terraform Provider [Linux amd64](https://cdn.teleport.dev/terraform-provider-teleport-v18.8.1-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/terraform-provider-teleport-v18.8.1-linux-arm64-bin.tar.gz) | [macOS amd64](https://cdn.teleport.dev/terraform-provider-teleport-v18.8.1-darwin-amd64-bin.tar.gz) | [macOS arm64](https://cdn.teleport.dev/terraform-provider-teleport-v18.8.1-darwin-arm64-bin.tar.gz) | [macOS universal](https://cdn.teleport.dev/terraform-provider-teleport-v18.8.1-darwin-universal-bin.tar.gz)\r\n* Event Handler [Linux amd64](https://cdn.teleport.dev/teleport-event-handler-v18.8.1-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-event-handler-v18.8.1-linux-arm64-bin.tar.gz) | [macOS amd64](https://cdn.teleport.dev/teleport-event-handler-v18.8.1-darwin-amd64-bin.tar.gz)\r\n* PagerDuty [Linux amd64](https://cdn.teleport.dev/teleport-access-pagerduty-v18.8.1-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-pagerduty-v18.8.1-linux-arm64-bin.tar.gz)\r\n* Jira [Linux amd64](https://cdn.teleport.dev/teleport-access-jira-v18.8.1-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-jira-v18.8.1-linux-arm64-bin.tar.gz)\r\n* Email [Linux amd64](https://cdn.teleport.dev/teleport-access-email-v18.8.1-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-email-v18.8.1-linux-arm64-bin.tar.gz)\r\n* Microsoft Teams [Linux amd64](https://cdn.teleport.dev/teleport-access-msteams-v18.8.1-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-msteams-v18.8.1-linux-arm64-bin.tar.gz)\r\n","reactions":{"url":"https://api.github.com/repos/gravitational/teleport/releases/323496304/reactions","total_count":1,"+1":1,"-1":0,"laugh":0,"hooray":0,"confused":0,"heart":0,"rocket":0,"eyes":0}},{"url":"https://api.github.com/repos/gravitational/teleport/releases/321223539","assets_url":"https://api.github.com/repos/gravitational/teleport/releases/321223539/assets","upload_url":"https://uploads.github.com/repos/gravitational/teleport/releases/321223539/assets{?name,label}","html_url":"https://github.com/gravitational/teleport/releases/tag/v18.8.0","id":321223539,"author":{"login":"mjsmithnh","id":4805850,"node_id":"MDQ6VXNlcjQ4MDU4NTA=","avatar_url":"https://avatars.githubusercontent.com/u/4805850?v=4","gravatar_id":"","url":"https://api.github.com/users/mjsmithnh","html_url":"https://github.com/mjsmithnh","followers_url":"https://api.github.com/users/mjsmithnh/followers","following_url":"https://api.github.com/users/mjsmithnh/following{/other_user}","gists_url":"https://api.github.com/users/mjsmithnh/gists{/gist_id}","starred_url":"https://api.github.com/users/mjsmithnh/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mjsmithnh/subscriptions","organizations_url":"https://api.github.com/users/mjsmithnh/orgs","repos_url":"https://api.github.com/users/mjsmithnh/repos","events_url":"https://api.github.com/users/mjsmithnh/events{/privacy}","received_events_url":"https://api.github.com/users/mjsmithnh/received_events","type":"User","user_view_type":"public","site_admin":false},"node_id":"RE_kwDOAeGNGc4TJXtz","tag_name":"v18.8.0","target_commitish":"master","name":"Teleport 18.8.0","draft":false,"immutable":false,"prerelease":false,"created_at":"2026-05-11T22:07:26Z","updated_at":"2026-05-20T20:46:53Z","published_at":"2026-05-12T15:02:20Z","assets":[],"tarball_url":"https://api.github.com/repos/gravitational/teleport/tarball/v18.8.0","zipball_url":"https://api.github.com/repos/gravitational/teleport/zipball/v18.8.0","body":"**Warning:** This release contains a regression that affects connectivity to resources via an approved just-in-time resource access request when the cluster is running agents older than v18.8.0.\r\n\r\nIf you use resource access requests and unable to ensure all agents are upgraded to v18.8.0 in tandem with auth and proxy, we recommend skipping this release and upgrading to v18.8.2 once it's available instead.\r\n\r\n## Description\r\n\r\n### Performance improvements in the SSH service\r\n\r\nThanks to internal improvements ([#66220](https://github.com/gravitational/teleport/pull/66220)), the Teleport SSH service memory usage and latency when opening shells/running commands is significantly lower than previous versions.\r\n\r\nThe reduction in the latency compared to the previous version of Teleport, as measured on a `m7i.xlarge` EC2 instance, amounts to roughly 100 ms when opening shells or launching commands and about 150 ms when using SFTP, with an additional 40 ms improvement when establishing the very first port forward for a given SSH connection.\r\n\r\nThe improvement in memory usage trades off an additional 7MiB of baseline memory usage for a significant reduction in the per-session memory usage of about 23 MiB for each shell or command execution, with another 20 MiB of memory savings for each SSH connection using port forwarding, and about 45 MiB for SFTP sessions.\r\n\r\n### VNet for Linux\r\n\r\nTeleport VNet support extends to Linux workstations.\r\n\r\n### Improvements to access list creation UX\r\n\r\nTeleport provides guided in-product UX for creating common types of access lists centered around granting users permissions to resources and permissions to request access to resources.\r\n\r\n### tsh MFA via browser\r\n\r\ntsh delegates MFA checks (both on login and for per-session MFA) to the browser, enabling the use of browser based passkeys or password managers with tsh.\r\n\r\n### Multi-domain support for Windows desktop access\r\n\r\nTeleport supports RDP connections to Windows hosts where the Windows users belong to different Active Directory domains than the target hosts.\r\n\r\n### Bound keypair joining for agents\r\n\r\nTeleport&#39;s bound keypair join method extends to support arbitrary Teleport agents in addition to bots.\r\n\r\n### Session summaries search\r\n\r\nIdentity Security provides users with CLI tooling for searching session summaries allowing users to find sessions based on natural language queries.\r\n\r\n### Terraform support for AWS EKS discovery\r\n\r\nUsers will be able to set up AWS EKS discovery at the AWS account level using the Terraform module.\r\n\r\n### Terraform support for access list workflows\r\n\r\nShort and long term access list creation flows in the web UI now include Terraform support allowing users to define access with infrastructure-as-code.\r\n\r\n### Teleport Connect installation and updates\r\n\r\nTeleport Connect for Windows now supports both per-machine and per-user installations. (Note: VNet is not available in per-user mode.)\r\n\r\nPer-machine installations can now receive automatic updates without prompting for administrator privileges. Those privileges are only required during the initial installation.\r\n\r\nStarting with this release, Teleport Connect only supports automatic upgrades. Downgrades must now be performed manually. This change applies to all platforms.\r\n\r\n#### Access requests privilege escalation UX for AWS\r\n\r\nTeleport users are now able to see specific IAM roles available to them when requesting elevated access to AWS CLI/console. Future releases will extend support for specific principal selection to access requests for other resource types as well.\r\n\r\n### Other fixes and improvements\r\n\r\n* Added support for AWS RDS discovery in the `teleport/discovery/aws` Terraform module. [#66627](https://github.com/gravitational/teleport/pull/66627)\r\n* Improved the performance of VNet on macOS by eliminating unnecessary reconnects. [#66562](https://github.com/gravitational/teleport/pull/66562)\r\n* Fixed identifier-first login form overflowing on mobile viewports. [#66620](https://github.com/gravitational/teleport/pull/66620)\r\n* Fixed `metadata.revision` not being excluded from the `teleport_vnet_config` Terraform schema. Users with existing state may need to run `terraform refresh` if `terraform show` fails with &#34;unsupported attribute revision&#34;. [#66617](https://github.com/gravitational/teleport/pull/66617)\r\n* Fixed resource-based access requests failing when node/ssh agents have not yet been updated to a version supporting Resource Constraints. [#66585](https://github.com/gravitational/teleport/pull/66585)\r\n* Updated Go to 1.25.10. [#66569](https://github.com/gravitational/teleport/pull/66569)\r\n* Fixed an issue with Azure discovery where blocked installation attempts prevent discovery from making progress. Install attempts will now time out after 5 minutes, but this can be adjusted by setting an environment variable on the Teleport Discovery Service, e.g., `TELEPORT_UNSTABLE_AZURE_RUN_COMMAND_TIMEOUT=3m45s`. [#66558](https://github.com/gravitational/teleport/pull/66558)\r\n* Increased verbosity of Teleport Discovery Service logs for VM discovery. [#66553](https://github.com/gravitational/teleport/pull/66553)\r\n* Improved Teleport Connect startup reliability on Windows. [#66509](https://github.com/gravitational/teleport/pull/66509)\r\n* Hardened event handler so it recovers in case of malformed session ID or corrupted data directory. [#66473](https://github.com/gravitational/teleport/pull/66473)\r\n* Added Azure Discovery With Terraform integration guided flow in the web UI. [#66493](https://github.com/gravitational/teleport/pull/66493)\r\n* Fixed app access dropping URL fragments through the auth redirect flow. [#66460](https://github.com/gravitational/teleport/pull/66460)\r\n* Added user traits filtering in the web UI. [#66457](https://github.com/gravitational/teleport/pull/66457)\r\n* Fixed an issue that could cause LDAP discovery to fail when a single desktop service discovers large numbers of hosts. [#66397](https://github.com/gravitational/teleport/pull/66397)\r\n* Added Azure VM support for `tctl discovery nodes` command for troubleshooting auto-discovery enrollment issues on Azure. [#66395](https://github.com/gravitational/teleport/pull/66395)\r\n* Fixed a rare input swallowing bug when resuming a moderated Node session. [#66370](https://github.com/gravitational/teleport/pull/66370)\r\n* Role with unknown fields is now rejected at create/edit time instead of being silently dropped. Applies to `tctl` and the web UI YAML editor. [#66360](https://github.com/gravitational/teleport/pull/66360)\r\n* Fix issue where generic error messages were being shown instead of specific ones for failed SSO logins. [#66348](https://github.com/gravitational/teleport/pull/66348)\r\n* Fixed MCP clients&#39; timeout and broken connections when the MCP server tries to resume the previous session. [#66343](https://github.com/gravitational/teleport/pull/66343)\r\n* Add `tsh beams` commands for the Beams public beta. [#66316](https://github.com/gravitational/teleport/pull/66316)\r\n* Fixed possible unavailability of Proxy service instances as a result of some API errors. [#66312](https://github.com/gravitational/teleport/pull/66312)\r\n* Fixed an issue where WebAssembly not being available would crash the web UI. [#66216](https://github.com/gravitational/teleport/pull/66216)\r\n* Added audit events for Azure VM auto-discovery installations, with install script output and exit status. [#66067](https://github.com/gravitational/teleport/pull/66067)\r\n* Fixed an issue where EC2 auto-discovery could install Teleport on an instance but silently drop the failure when the agent could not join the cluster. A new `ec2-join-failure` user task is now raised with the actual join error message surfaced from the agent&#39;s readyz socket. [#66023](https://github.com/gravitational/teleport/pull/66023)\r\n* Added support for `WorkloadIdentity` when using the `--apply-on-startup` and `--bootstrap` flags. [#65581](https://github.com/gravitational/teleport/pull/65581)\r\n* Fixed a bug where tbot&#39;s `/readyz` endpoint would report &#34;unhealthy&#34; even after identity renewal succeeds on-retry. [#65258](https://github.com/gravitational/teleport/pull/65258)\r\n* Added support for both per-machine and per-user installations in Teleport Connect on Windows (Note: VNet is unavailable in per-user mode). [#65173](https://github.com/gravitational/teleport/pull/65173)\r\n* Enabled silent automatic updates for Teleport Connect per-machine installations on Windows; elevated privileges are now only required during the initial setup. [#65173](https://github.com/gravitational/teleport/pull/65173)\r\n* Deprecated the `TELEPORT_CDN_BASE_URL` and `TELEPORT_TOOLS_VERSION` environment variables for configuring Teleport Connect Windows updates. These must now be managed via system policy registry keys under `HKEY_LOCAL_MACHINE` or `HKEY_CURRENT_USER\\SOFTWARE\\Policies\\Teleport\\TeleportConnect`. The environment variables are still read for compatibility, but per-machine updates may require UAC prompts until configuration is migrated to registry policy keys. [#65173](https://github.com/gravitational/teleport/pull/65173)\r\n* Automatic updates in Teleport Connect no longer allow app version downgrades (applies to all platforms). [#65173](https://github.com/gravitational/teleport/pull/65173)\r\n* Added support for reverse tunnel agent stale connection timeout detection and recovery. [#62531](https://github.com/gravitational/teleport/pull/62531)\r\n\r\nEnterprise:\r\n* Reject AWS Identity Center System Credentials on Teleport Cloud.\r\n* Validate AWS Identity Center install credentials with AWS API calls.\r\n* Added support for Terraform configuration generation in the Access List creation wizard in the web UI, allowing users to deploy their Access List via Terraform.\r\n* Fix a potential deadlock in the CockroachDB backend.\r\n* Handle mapping of groups for Entra ID SAML logins when user is member of 150&#43; groups.\r\n* Enterprise licenses with a devices limit for device trust can now enroll unlimited devices.\r\n\r\n## Download\r\n\r\nDownload the current and previous releases of Teleport at https://goteleport.com/download.\r\n\r\n## Plugins\r\n\r\nDownload the current release of Teleport plugins from the links below.\r\n* Slack [Linux amd64](https://cdn.teleport.dev/teleport-access-slack-v18.8.0-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-slack-v18.8.0-linux-arm64-bin.tar.gz) \r\n* Mattermost [Linux amd64](https://cdn.teleport.dev/teleport-access-mattermost-v18.8.0-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-mattermost-v18.8.0-linux-arm64-bin.tar.gz)\r\n* Discord [Linux amd64](https://cdn.teleport.dev/teleport-access-discord-v18.8.0-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-discord-v18.8.0-linux-arm64-bin.tar.gz)\r\n* Terraform Provider [Linux amd64](https://cdn.teleport.dev/terraform-provider-teleport-v18.8.0-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/terraform-provider-teleport-v18.8.0-linux-arm64-bin.tar.gz) | [macOS amd64](https://cdn.teleport.dev/terraform-provider-teleport-v18.8.0-darwin-amd64-bin.tar.gz) | [macOS arm64](https://cdn.teleport.dev/terraform-provider-teleport-v18.8.0-darwin-arm64-bin.tar.gz) | [macOS universal](https://cdn.teleport.dev/terraform-provider-teleport-v18.8.0-darwin-universal-bin.tar.gz)\r\n* Event Handler [Linux amd64](https://cdn.teleport.dev/teleport-event-handler-v18.8.0-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-event-handler-v18.8.0-linux-arm64-bin.tar.gz) | [macOS amd64](https://cdn.teleport.dev/teleport-event-handler-v18.8.0-darwin-amd64-bin.tar.gz)\r\n* PagerDuty [Linux amd64](https://cdn.teleport.dev/teleport-access-pagerduty-v18.8.0-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-pagerduty-v18.8.0-linux-arm64-bin.tar.gz)\r\n* Jira [Linux amd64](https://cdn.teleport.dev/teleport-access-jira-v18.8.0-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-jira-v18.8.0-linux-arm64-bin.tar.gz)\r\n* Email [Linux amd64](https://cdn.teleport.dev/teleport-access-email-v18.8.0-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-email-v18.8.0-linux-arm64-bin.tar.gz)\r\n* Microsoft Teams [Linux amd64](https://cdn.teleport.dev/teleport-access-msteams-v18.8.0-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-msteams-v18.8.0-linux-arm64-bin.tar.gz)\r\n","reactions":{"url":"https://api.github.com/repos/gravitational/teleport/releases/321223539/reactions","total_count":1,"+1":1,"-1":0,"laugh":0,"hooray":0,"confused":0,"heart":0,"rocket":0,"eyes":0}},{"url":"https://api.github.com/repos/gravitational/teleport/releases/316039465","assets_url":"https://api.github.com/repos/gravitational/teleport/releases/316039465/assets","upload_url":"https://uploads.github.com/repos/gravitational/teleport/releases/316039465/assets{?name,label}","html_url":"https://github.com/gravitational/teleport/releases/tag/v18.7.6","id":316039465,"author":{"login":"doggydogworld","id":29820606,"node_id":"MDQ6VXNlcjI5ODIwNjA2","avatar_url":"https://avatars.githubusercontent.com/u/29820606?v=4","gravatar_id":"","url":"https://api.github.com/users/doggydogworld","html_url":"https://github.com/doggydogworld","followers_url":"https://api.github.com/users/doggydogworld/followers","following_url":"https://api.github.com/users/doggydogworld/following{/other_user}","gists_url":"https://api.github.com/users/doggydogworld/gists{/gist_id}","starred_url":"https://api.github.com/users/doggydogworld/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/doggydogworld/subscriptions","organizations_url":"https://api.github.com/users/doggydogworld/orgs","repos_url":"https://api.github.com/users/doggydogworld/repos","events_url":"https://api.github.com/users/doggydogworld/events{/privacy}","received_events_url":"https://api.github.com/users/doggydogworld/received_events","type":"User","user_view_type":"public","site_admin":false},"node_id":"RE_kwDOAeGNGc4S1mEp","tag_name":"v18.7.6","target_commitish":"master","name":"Teleport 18.7.6","draft":false,"immutable":false,"prerelease":false,"created_at":"2026-04-30T00:24:13Z","updated_at":"2026-05-01T04:29:51Z","published_at":"2026-04-30T19:46:20Z","assets":[],"tarball_url":"https://api.github.com/repos/gravitational/teleport/tarball/v18.7.6","zipball_url":"https://api.github.com/repos/gravitational/teleport/zipball/v18.7.6","body":"## Description\r\n\r\n### Security fixes\r\n\r\nThis release includes various security-related improvements and bug fixes. \r\nWe recommend that users on versions prior to v18.7.4 upgrade their Auth and Database Services to this latest release.\r\nFor Teleport Cloud customers, your control plane has already been upgraded to a patched release.\r\n\r\n#### [High] Authorization bypass in encrypted session recordings\r\n\r\nTeleport did not ensure sufficient authorization in some of the encrypted session recordings APIs.\r\nThis could allow an attacker to upload recordings to the cluster.\r\nFor self-hosted users that do not use encrypted session recordings, the following debug log messages\r\non auth server would indicate vulnerable APIs being called:\r\n- “creating encrypted session upload”\r\n- “uploading encrypted session part”\r\n- “completing encrypted session upload”\r\n\r\nThis issue specifically affects Teleport v18. We recommend that all users upgrade their \r\nAuth Services to this release to ensure continued security and stability.\r\n\r\n#### [High] Cross-node session recording access\r\n\r\nWhen checking system service access to session recordings and audit logs, Teleport did not\r\nperform sufficient authorization. This could allow a compromised Teleport SSH node service to\r\naccess audit events and session recordings from other nodes in the cluster.\r\nWe recommend that all users upgrade their Auth Services to this release to ensure continued security and stability.\r\n\r\n#### [Medium] SSRF via AWS database access endpoint\r\n\r\nTeleport did not sufficiently validate the connection endpoint for AWS database access\r\n(DynamoDB, OpenSearch, Keyspaces). This could allow a malicious actor with access to Teleport\r\nconfiguration to steal database access credentials by crafting a connection endpoint pointing to\r\ntheir domain.\r\nAll users that use Teleport to access AWS-hosted databases (DynamoDB, OpenSearch, Keyspaces)\r\nare advised to upgrade their Auth and Database Services to this release to ensure continued security\r\nand stability.\r\n\r\n### Other fixes and improvements\r\n\r\n* Fixed an issue that prevents GCP Server discovery to try to enroll all the VMs that are found when one of them returns an error. [#66240](https://github.com/gravitational/teleport/pull/66240)\r\n* Added scoped roles support to the Terraform provider. [#66225](https://github.com/gravitational/teleport/pull/66225)\r\n* Added scoped role assignment support to the Terraform provider. [#66225](https://github.com/gravitational/teleport/pull/66225)\r\n* Fixed an issue where `tctl edit plugin/jamf` could break other plugins when providing non-zero duration value. [#66191](https://github.com/gravitational/teleport/pull/66191)\r\n* Introduces `skip_initial_connection` option to the `teleportmwi` provider to allow lazy initialization of the provider. [#66139](https://github.com/gravitational/teleport/pull/66139)\r\n* Initialize keystore sign and decrypt metrics at startup and register missing decrypt metric collectors. [#66110](https://github.com/gravitational/teleport/pull/66110)\r\n* Added current and previous resources discovered summary per service to Discovery Config Status. [#66097](https://github.com/gravitational/teleport/pull/66097)\r\n* Fixed a bug where generated JWT tokens were leaked into audit event. [#66095](https://github.com/gravitational/teleport/pull/66095)\r\n* Updated internal database dependencies to resolve multiple security vulnerabilities (CVE-2026-4427, CVE-2026-32286, and others). [#66083](https://github.com/gravitational/teleport/pull/66083)\r\n* Fixed a possible panic during TTY session processing/playback/summarization from crashing Teleport. [#66080](https://github.com/gravitational/teleport/pull/66080)\r\n* Fixed an issue where the endpoint used by `tsh scan keys` could leak resources on a server error; this affected only clusters with Access Graph enabled. [#66076](https://github.com/gravitational/teleport/pull/66076)\r\n* Added `teleport_app_active_sessions` Prometheus gauge with `app` label for app access agent autoscaling. [#66050](https://github.com/gravitational/teleport/pull/66050)\r\n* Fixed joining for agents and proxies connecting directly to an Auth service when they specify a CA pin and any lock in the cluster is in force. [#66044](https://github.com/gravitational/teleport/pull/66044)\r\n* Added scoped role to the k8s operator. [#66034](https://github.com/gravitational/teleport/pull/66034)\r\n* Added scoped role assignments to the k8s operator. [#66034](https://github.com/gravitational/teleport/pull/66034)\r\n* Fixed Access List-granted roles being absent from the web session created after a local user password reset or invite acceptance, requiring a logout/login cycle to restore access. [#66011](https://github.com/gravitational/teleport/pull/66011)\r\n* Added support for Azure join tokens based on Azure tenant ID. [#65989](https://github.com/gravitational/teleport/pull/65989)\r\n* Fixed a &#34;No such process&#34; error that could happen on the very first launch of VNet on macOS. [#65967](https://github.com/gravitational/teleport/pull/65967)\r\n* Improved readability of the search results in Teleport Connect. [#65928](https://github.com/gravitational/teleport/pull/65928)\r\n* Fixed a Teleport Connect issue on Windows where startup could fail when `HTTPS_PROXY` is set. [#65924](https://github.com/gravitational/teleport/pull/65924)\r\n* Added `user.metadata.name` variable to RBAC role templates and expressions. [#65923](https://github.com/gravitational/teleport/pull/65923)\r\n* Fix VNet SSH per-session MFA checks to use the requested SSH login instead of the profile default login. [#65909](https://github.com/gravitational/teleport/pull/65909)\r\n* Initialize backend read and requests metrics to zero at startup. [#65898](https://github.com/gravitational/teleport/pull/65898)\r\n* Fixed Teleport not taking over an existing unmanaged host user when configured to. [#65838](https://github.com/gravitational/teleport/pull/65838)\r\n* Fixes race condition in dynamoDB backend which can lead to missed events, resulting in a inconsistent cache state. [#65821](https://github.com/gravitational/teleport/pull/65821)\r\n* Added `ui_config` resource support to the Terraform provider. [#65800](https://github.com/gravitational/teleport/pull/65800)\r\n* Set default name for `UIConfig` resource as `ui-config`. [#65800](https://github.com/gravitational/teleport/pull/65800)\r\n* Fixed an issue in Teleport Connect on macOS where selecting &#34;Open Teleport Connect&#34; from the menu bar would not reliably open the app. [#65774](https://github.com/gravitational/teleport/pull/65774)\r\n* The github join method now supports the enterprise/enterprise_id claims. [#65700](https://github.com/gravitational/teleport/pull/65700)\r\n* Teleport Connect now displays user roles in an expandable list. [#65654](https://github.com/gravitational/teleport/pull/65654)\r\n* Standard Teleport agents can now join using the `bound_keypair` join method. [#65625](https://github.com/gravitational/teleport/pull/65625)\r\n* Add x11 forwarding, SSH File Copying, Agent Forwarding, SSH Port Forwarding, Create Host User, Max Sessions, and host sudoers to scoped ssh role options. [#65601](https://github.com/gravitational/teleport/pull/65601)\r\n* Added `tctl discovery nodes` command for troubleshooting AWS EC2 auto-discovery enrollment issues. [#65598](https://github.com/gravitational/teleport/pull/65598)\r\n* Update Go to v1.25.9. [#65586](https://github.com/gravitational/teleport/pull/65586)\r\n* Fix access graph AWS discovery to not deadlock when Identity Activity Center is disabled. [#65574](https://github.com/gravitational/teleport/pull/65574)\r\n* Clear certs from local ssh agent when switching between unscoped user to scoped user. [#65568](https://github.com/gravitational/teleport/pull/65568)\r\n* Added `lock` resource support to the Kubernetes operator. [#65543](https://github.com/gravitational/teleport/pull/65543)\r\n* Added support for `*` and `$` globbing to the GitHub Actions token rules. [#65539](https://github.com/gravitational/teleport/pull/65539)\r\n* The `tbot keypair create` command will now create the specified directory if necessary. [#65528](https://github.com/gravitational/teleport/pull/65528)\r\n* Fixed an issue in Teleport Connect where the &#34;Reopen&#34; button in the &#34;Reopen previous session&#34; modal would not automatically receive focus. [#65513](https://github.com/gravitational/teleport/pull/65513)\r\n* Fixed a bug where Teleport Connect displayed an error about an expired certificate instead of showing the login modal. [#65512](https://github.com/gravitational/teleport/pull/65512)\r\n* Added visible `teleport.dev/` labels for Azure and GCP auto-discovered VMs, making subscription ID, VM ID, region, resource group, VM name, and zone available in the web UI, CLI output, and RBAC rules. [#65462](https://github.com/gravitational/teleport/pull/65462)\r\n* Fixed panic in tctl get scoped_token when non-token join method scoped tokens were present. [#65461](https://github.com/gravitational/teleport/pull/65461)\r\n* Fix &#34;tctl edit&#34; bugs when editing multiple resources, or resources with sub_kinds (for example, CAs). [#65341](https://github.com/gravitational/teleport/pull/65341)\r\n* Removed expired Baltimore CyberTrust Root CA used for Azure databases. [#65329](https://github.com/gravitational/teleport/pull/65329)\r\n* Reimplemented how Teleport Connect handles deep links for Device Trust auth and launching VNet from the Web UI. [#65316](https://github.com/gravitational/teleport/pull/65316)\r\n* Extended access monitoring predicate language with `contains(set, item)` expression. [#65294](https://github.com/gravitational/teleport/pull/65294)\r\n* Fixed an issue where viewing a session recording that did not exist/was not uploaded yet would show an empty player instead of an error message. [#65269](https://github.com/gravitational/teleport/pull/65269)\r\n* Auth connector names are now limited to 768 characters. [#65242](https://github.com/gravitational/teleport/pull/65242)\r\n* Fix a goroutine leak in the Teleport Connect MFA prompt when both SSO MFA and Webauthn are available second factors. [#65229](https://github.com/gravitational/teleport/pull/65229)\r\n* Add SAML IdP Service Provider support to Terraform provider. [#65199](https://github.com/gravitational/teleport/pull/65199)\r\n* Fixed minor bug in Web UI and Connect where static and dynamic labels with the same key are duplicated. [#65198](https://github.com/gravitational/teleport/pull/65198)\r\n* Fix URL components for SAML auth connector ACS URL in tests, error message. [#65197](https://github.com/gravitational/teleport/pull/65197)\r\n* Add `lock` support to the Terraform Provider. [#65134](https://github.com/gravitational/teleport/pull/65134)\r\n* Fix a bug in the `teleport-cluster` chart causing some `auth.*` values to not be used when rendering hooks or config manifests. [#65131](https://github.com/gravitational/teleport/pull/65131)\r\n* Fix Cross-access-list member injection in raw gRPC UpsertAccessListWithMembers call due to missing member.Spec.AccessList field validation. [#65123](https://github.com/gravitational/teleport/pull/65123)\r\n* Fix an issue that allowed bypassing Resource Access Requests&#39; AllowedResourceIDs when creating app sessions. [#65116](https://github.com/gravitational/teleport/pull/65116)\r\n* Fix an issue that allowed IP Pinning protections to be bypassed via direct dial to a Teleport Node. [#65094](https://github.com/gravitational/teleport/pull/65094)\r\n* Fix an issue that allowed IP Pinning protections to be bypassed via the WebUI. Also fix an issue with sporadic WebUI connection errors when the Proxy sees an unexpected client IP even though IP Pinning is not enforced. [#65090](https://github.com/gravitational/teleport/pull/65090)\r\n* Fix an issue where `tctl get tokens` would prompt for admin MFA three times rather than once. [#65084](https://github.com/gravitational/teleport/pull/65084)\r\n* Display an alert when SAML connector signing certificates are within 90 days of expiry. [#65067](https://github.com/gravitational/teleport/pull/65067)\r\n* Add scopes status to webapi ping endpoint to determine whether the proxy and auth server has scopes enabled or not. [#65062](https://github.com/gravitational/teleport/pull/65062)\r\n* Azure VM discovery configuration now supports specifying a wildcard (&#34;*&#34;) subscription to discover all VMs in all subscriptions where the Discovery service has Microsoft.Resources/subscriptions/read permission. [#65045](https://github.com/gravitational/teleport/pull/65045)\r\n* Added support for multiple trusted CA certificates to Windows Desktop Service&#39;s LDAP configuration. [#65040](https://github.com/gravitational/teleport/pull/65040)\r\n* Fix mouse move when using fixed screen size Windows desktop. [#65025](https://github.com/gravitational/teleport/pull/65025)\r\n* Fixed intermittent issues with VNet on Windows with NRPT rules being wiped after Group Policy refresh. [#65017](https://github.com/gravitational/teleport/pull/65017)\r\n* Fixed AWS IAM Roles Anywhere Web/Console access for Gov Cloud and China partitioned AWS accounts. [#65016](https://github.com/gravitational/teleport/pull/65016)\r\n* Device Trust is now accessible under Zero Trust Access in the web UI. [#65005](https://github.com/gravitational/teleport/pull/65005)\r\n* Fixed an issue with desktop directory sharing in Teleport Connect that caused file modification times not to be displayed. [#64921](https://github.com/gravitational/teleport/pull/64921)\r\n* Added support for configuring agentless OpenSSH servers using `tbot`. [#64899](https://github.com/gravitational/teleport/pull/64899)\r\n* Fixed an issue preventing Teleport Connect from launching when the OS username contains non-ASCII characters. [#64885](https://github.com/gravitational/teleport/pull/64885)\r\n* Fixed access request comments and review reasons not preserving newlines when rendered. [#64866](https://github.com/gravitational/teleport/pull/64866)\r\n* Add documentation for the `tsh aws-profile` command. [#64777](https://github.com/gravitational/teleport/pull/64777)\r\n* API rate limiting for authenticated per-session MFA requests now follows the regular API rate limits, making the limit unlikely to be hit during parallel SSH operations. [#64775](https://github.com/gravitational/teleport/pull/64775)\r\n* Print a message indicating that `tctl recordings download &lt;session_id&gt;` completed successfully. [#64721](https://github.com/gravitational/teleport/pull/64721)\r\n* Adds the ability to not render hooks in the `teleport-kube-agent` chart. [#64706](https://github.com/gravitational/teleport/pull/64706)\r\n* Fixes version number for charts `teleport-kube-agent-updater` and `teleport-spiffe-daemon-set`. [#64686](https://github.com/gravitational/teleport/pull/64686)\r\n* Vnet_config can now be managed via the Teleport Terraform Provider. [#64682](https://github.com/gravitational/teleport/pull/64682)\r\n* Added scoped tokens to the k8s operator. [#64639](https://github.com/gravitational/teleport/pull/64639)\r\n* Fixed a bug affecting nodes on v18.3.0&#43; rejoining with new system roles to clusters with Auth services on v18.2.10-. [#64638](https://github.com/gravitational/teleport/pull/64638)\r\n* Updated github.com/docker/cli to v29.2.0&#43;incompatible (addresses CVE-2025-15558). [#64606](https://github.com/gravitational/teleport/pull/64606)\r\n* Fix map generation for teleport resources to k8s. [#64597](https://github.com/gravitational/teleport/pull/64597)\r\n* Add scope aware profiles after tsh login. [#64592](https://github.com/gravitational/teleport/pull/64592)\r\n* Added a new tsh aws-profile command that detects your AWS Identity Center integration (if configured) and writes corresponding AWS profiles into your local AWS config file for later use. [#64590](https://github.com/gravitational/teleport/pull/64590)\r\n* Add `tctl acl` commands for managing access list reviews. [#64587](https://github.com/gravitational/teleport/pull/64587)\r\n* Validate Kubernetes impersonation user and group header values to prevent CRLF or null-byte header injection via crafted role definitions. [#64586](https://github.com/gravitational/teleport/pull/64586)\r\n* Fixed Azure and GCP server auto-discovery installation when the target VM had a system-wide HTTP proxy configured. [#64552](https://github.com/gravitational/teleport/pull/64552)\r\n* Teleport Connect now displays the Message of the Day (MOTD) before login. [#64549](https://github.com/gravitational/teleport/pull/64549)\r\n* Fixed bug that causes Windows desktop connection errors on EC2 joined nodes. [#64545](https://github.com/gravitational/teleport/pull/64545)\r\n* Fixed `tsh login --request-id` to display up to date profile information including the assumed access request and roles. [#64536](https://github.com/gravitational/teleport/pull/64536)\r\n* Update Go to v1.25.8. [#64434](https://github.com/gravitational/teleport/pull/64434)\r\n* Added terraform provider support for teleport_scoped_token. [#64392](https://github.com/gravitational/teleport/pull/64392)\r\n* Add SAML IdP Service Provider support to k8s operator. [#64380](https://github.com/gravitational/teleport/pull/64380)\r\n* Fixed a bug causing spurious failures to upload encrypted session recordings when 4MB or larger. [#64361](https://github.com/gravitational/teleport/pull/64361)\r\n* Fix agent forwarding in proxy recording mode. [#64349](https://github.com/gravitational/teleport/pull/64349)\r\n* Fixed failures to record extra large session events in synchronous recording modes. [#64343](https://github.com/gravitational/teleport/pull/64343)\r\n* Fixed a rare race condition causing initial node heartbeats to be missing an address. [#64332](https://github.com/gravitational/teleport/pull/64332)\r\n* Fixed a VNet regression where web app access could fail when access was assumed in the Web UI only while VNet was already running. [#64317](https://github.com/gravitational/teleport/pull/64317)\r\n* Add support for Resource-Scoped Constraints to Access Requests, allowing users to narrow the scope of their requested access by selecting individual principals on resources while creating an Access Request via the Teleport Web UI. Initial support includes Role ARNs for AWS Console app resources. [#63207](https://github.com/gravitational/teleport/pull/63207)\r\n* Azure VM discovery will wait for installation and collect potential errors. The results will update discovery config statistics. VM installation errors will be captured as user tasks. [#62731](https://github.com/gravitational/teleport/pull/62731)\r\n\r\nEnterprise:\r\n* SAML IdP: Custom attribute mappings now overwrite default attributes with the same Name instead of duplicating them. Previously, mapping a default attribute like eduPersonAffiliation.\r\n* Fixes the issue where users with ongoing Access Requests to Okta resources would synced back as permanent Access List members for the requested resources during the periodic Okta import.\r\n* Fixed AWSIC Group membership updates so they are no longer abandoned when AWS is presented with an obsolete User ID.\r\n* Fix Okta assignment reconciliation failing for applications with large user lists where the API response time exceeded the 30s HTTP client timeout by increase the Okta http connection Timeout to 5 min.\r\n* Fixed an issue where Teleport could return a stale SCIM user group attribute when a user no longer belonged to any SCIM groups. Previously, in this case, the SCIM /Users endpoint could return outdated data from an earlier state when the user still had at least one group assigned.\r\n* Add support for workload_cluster resource for Teleport Cloud users to provision new Teleport Cloud clusters.\r\n* Improve SCIM performance by using cache for /Users and /Groups listing calls.\r\n* Fixed SCIM group and user listing pagination to return the correct totalResults count across all pages. Previously, totalResults could undercount matching resources when paginating beyond the first page,.\r\n* Fixed an issue where characters such as `.` were not permitted in an instance profile ARN when setting up session summaries inference.\r\n* Access list owners are now automatically suggested as reviewers when the list grants members the ability to request access to resources and owners the ability to review those requests.\r\n* Added handling for AWS Identity Center users deleted outside of Teleport&#39;s control.\r\n* Device Trust is now accessible under Zero Trust Access in the web UI.\r\n* Fixed group member provisioning bug in Identity Center plugin caused by an unsupported PATCH operation.\r\n* Fix an issue where Okta pending assignments could overlap with Access List synchronization, causing users to be unintentionally re-added to access lists in case of strict Okta API rate limits.\r\n* Fixed AWS Account rename handling in Identity Center plugin when an old account name is restored.\r\n* Fix the issue where clicking **Provision User** after enrolling Okta SCIM integration could result in &#34;missing Okta user ID&#34; error.\r\n* Added a wizard for creating access lists that includes defining which resources members can access.\r\n\r\n## Download\r\n\r\nDownload the current and previous releases of Teleport at https://goteleport.com/download.\r\n\r\n## Plugins\r\n\r\nDownload the current release of Teleport plugins from the links below.\r\n* Slack [Linux amd64](https://cdn.teleport.dev/teleport-access-slack-v18.7.6-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-slack-v18.7.6-linux-arm64-bin.tar.gz) \r\n* Mattermost [Linux amd64](https://cdn.teleport.dev/teleport-access-mattermost-v18.7.6-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-mattermost-v18.7.6-linux-arm64-bin.tar.gz)\r\n* Discord [Linux amd64](https://cdn.teleport.dev/teleport-access-discord-v18.7.6-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-discord-v18.7.6-linux-arm64-bin.tar.gz)\r\n* Terraform Provider [Linux amd64](https://cdn.teleport.dev/terraform-provider-teleport-v18.7.6-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/terraform-provider-teleport-v18.7.6-linux-arm64-bin.tar.gz) | [macOS amd64](https://cdn.teleport.dev/terraform-provider-teleport-v18.7.6-darwin-amd64-bin.tar.gz) | [macOS arm64](https://cdn.teleport.dev/terraform-provider-teleport-v18.7.6-darwin-arm64-bin.tar.gz) | [macOS universal](https://cdn.teleport.dev/terraform-provider-teleport-v18.7.6-darwin-universal-bin.tar.gz)\r\n* Event Handler [Linux amd64](https://cdn.teleport.dev/teleport-event-handler-v18.7.6-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-event-handler-v18.7.6-linux-arm64-bin.tar.gz) | [macOS amd64](https://cdn.teleport.dev/teleport-event-handler-v18.7.6-darwin-amd64-bin.tar.gz)\r\n* PagerDuty [Linux amd64](https://cdn.teleport.dev/teleport-access-pagerduty-v18.7.6-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-pagerduty-v18.7.6-linux-arm64-bin.tar.gz)\r\n* Jira [Linux amd64](https://cdn.teleport.dev/teleport-access-jira-v18.7.6-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-jira-v18.7.6-linux-arm64-bin.tar.gz)\r\n* Email [Linux amd64](https://cdn.teleport.dev/teleport-access-email-v18.7.6-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-email-v18.7.6-linux-arm64-bin.tar.gz)\r\n* Microsoft Teams [Linux amd64](https://cdn.teleport.dev/teleport-access-msteams-v18.7.6-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-msteams-v18.7.6-linux-arm64-bin.tar.gz)\r\n\r\n---\r\n\r\nlabels: security-patch=yes,security-patch-alts=v18.7.4|v18.7.5\r\n","reactions":{"url":"https://api.github.com/repos/gravitational/teleport/releases/316039465/reactions","total_count":3,"+1":3,"-1":0,"laugh":0,"hooray":0,"confused":0,"heart":0,"rocket":0,"eyes":0}},{"url":"https://api.github.com/repos/gravitational/teleport/releases/315879445","assets_url":"https://api.github.com/repos/gravitational/teleport/releases/315879445/assets","upload_url":"https://uploads.github.com/repos/gravitational/teleport/releases/315879445/assets{?name,label}","html_url":"https://github.com/gravitational/teleport/releases/tag/v17.7.23","id":315879445,"author":{"login":"aadc-dev","id":215184129,"node_id":"U_kgDODNNzAQ","avatar_url":"https://avatars.githubusercontent.com/u/215184129?v=4","gravatar_id":"","url":"https://api.github.com/users/aadc-dev","html_url":"https://github.com/aadc-dev","followers_url":"https://api.github.com/users/aadc-dev/followers","following_url":"https://api.github.com/users/aadc-dev/following{/other_user}","gists_url":"https://api.github.com/users/aadc-dev/gists{/gist_id}","starred_url":"https://api.github.com/users/aadc-dev/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/aadc-dev/subscriptions","organizations_url":"https://api.github.com/users/aadc-dev/orgs","repos_url":"https://api.github.com/users/aadc-dev/repos","events_url":"https://api.github.com/users/aadc-dev/events{/privacy}","received_events_url":"https://api.github.com/users/aadc-dev/received_events","type":"User","user_view_type":"public","site_admin":false},"node_id":"RE_kwDOAeGNGc4S0_AV","tag_name":"v17.7.23","target_commitish":"master","name":"Teleport 17.7.23","draft":false,"immutable":false,"prerelease":false,"created_at":"2026-04-29T22:02:58Z","updated_at":"2026-04-30T16:19:04Z","published_at":"2026-04-30T15:25:29Z","assets":[],"tarball_url":"https://api.github.com/repos/gravitational/teleport/tarball/v17.7.23","zipball_url":"https://api.github.com/repos/gravitational/teleport/zipball/v17.7.23","body":"## Description\n\n### Security fixes\n\nThis patch addresses two security vulnerabilities.\nImpacted users are recommended to upgrade their auth and database services to the latest version.\nFor Teleport Cloud customers, your control plane has already been upgraded to a patched release.\n\n#### [High] Cross-node session recording access\n\nWhen checking system service access to session recordings and audit logs, Teleport did not\nperform sufficient authorization. This could allow a compromised Teleport SSH node service to\naccess audit events and session recordings from other nodes in the cluster.\nAll users are advised to upgrade their Auth services to the patched v17 release.\n\n#### [Medium] SSRF via AWS database access endpoint\n\nTeleport did not sufficiently validate the connection endpoint for AWS database access\n(DynamoDB, OpenSearch, Keyspaces). This could allow a malicious actor with access to Teleport\nconfiguration to steal database access credentials by crafting a connection endpoint pointing to\ntheir domain.\nAll users that use Teleport to access AWS-hosted databases (DynamoDB, OpenSearch, Keyspaces)\nare advised to upgrade their auth and database services to the patched v17 release\n\n### Other fixes and improvements\nChangelog:\n* Initialize keystore sign and decrypt metrics at startup. [#66109](https://github.com/gravitational/teleport/pull/66109)\n* Updated `jackc/pgx` packages to fix CVE-2026-4427/CVE-2026-32286, CVE-2026-33815, CVE-2026-33816, GHSA-j88v-2chj-qfwx. [#66093](https://github.com/gravitational/teleport/pull/66093)\n* Added `teleport_app_active_sessions` Prometheus gauge with `app` label for app access agent autoscaling. [#66049](https://github.com/gravitational/teleport/pull/66049)\n* Fixed a &#34;No such process&#34; error that could happen on the very first launch of VNet on macOS. [#65968](https://github.com/gravitational/teleport/pull/65968)\n* Fixed a Teleport Connect issue on Windows where startup could fail when `HTTPS_PROXY` is set. [#65925](https://github.com/gravitational/teleport/pull/65925)\n* Initialize backend read and requests metrics to zero at startup. [#65901](https://github.com/gravitational/teleport/pull/65901)\n* Fixed Teleport not taking over an existing unmanaged host user when configured to. [#65837](https://github.com/gravitational/teleport/pull/65837)\n* Fixes potential race condition in dynamoDB backend which can lead to missed events, resulting in a inconsistent cache state. [#65822](https://github.com/gravitational/teleport/pull/65822)\n* Fixed an issue in Teleport Connect on macOS where selecting &#34;Open Teleport Connect&#34; from the menu bar would not reliably open the app. [#65773](https://github.com/gravitational/teleport/pull/65773)\n* Updated github.com/go-git/go-git/v5 to resolve CVE-2026-34165. [#65649](https://github.com/gravitational/teleport/pull/65649)\n* Updated OpenTelemetry dependencies to address CVE-2026-24051. [#65647](https://github.com/gravitational/teleport/pull/65647)\n* Update Go to v1.25.9. [#65587](https://github.com/gravitational/teleport/pull/65587)\n* Fixed &#34;tctl edit&#34; bugs when editing multiple resources, or resources with sub_kinds (for example, CAs). [#65343](https://github.com/gravitational/teleport/pull/65343)\n* Removed expired Baltimore CyberTrust Root CA used for Azure databases. [#65328](https://github.com/gravitational/teleport/pull/65328)\n* Reimplemented how Teleport Connect handles deep links for Device Trust auth and launching VNet from the Web UI. [#65317](https://github.com/gravitational/teleport/pull/65317)\n* Fixed minor bug in Web UI and Connect where static and dynamic labels with the same key are duplicated. [#65295](https://github.com/gravitational/teleport/pull/65295)\n* Fixed a goroutine leak in the Teleport Connect MFA prompt when both SSO MFA and Webauthn are available second factors. [#65230](https://github.com/gravitational/teleport/pull/65230)\n* Fixed an issue that allowed bypassing Resource Access Requests&#39; AllowedResourceIDs when creating app sessions. [#65117](https://github.com/gravitational/teleport/pull/65117)\n* Fixed an issue that allowed IP Pinning protections to be bypassed via direct dial to a Teleport Node. [#65095](https://github.com/gravitational/teleport/pull/65095)\n* Fixed an issue that allowed IP Pinning protections to be bypassed via the WebUI. Also fix an issue with sporadic WebUI connection errors when the Proxy sees an unexpected client IP even though IP Pinning is not enforced. [#65093](https://github.com/gravitational/teleport/pull/65093)\n* Fixed intermittent issues with VNet on Windows with NRPT rules being wiped after Group Policy refresh. [#65018](https://github.com/gravitational/teleport/pull/65018)\n* Device Trust is now accessible under Zero Trust Access in the web UI. [#65006](https://github.com/gravitational/teleport/pull/65006)\n* Fixed an issue with desktop directory sharing in Teleport Connect that caused file modification times not to be displayed. [#64920](https://github.com/gravitational/teleport/pull/64920)\n* Fixed an issue preventing Teleport Connect from launching on Windows when the OS username contains non-ASCII characters. [#64886](https://github.com/gravitational/teleport/pull/64886)\n* API rate limiting for authenticated per-session MFA requests now follows the regular API rate limits, making the limit unlikely to be hit during parallel SSH operations. [#64776](https://github.com/gravitational/teleport/pull/64776)\n* Print a message indicating that `tctl recordings download &lt;session_id&gt;` completed successfully. [#64722](https://github.com/gravitational/teleport/pull/64722)\n* Updated github.com/docker/cli to v29.2.0&#43;incompatible (addresses CVE-2025-15558). [#64608](https://github.com/gravitational/teleport/pull/64608)\n* Teleport Connect now displays the Message of the Day (MOTD) before login. [#64550](https://github.com/gravitational/teleport/pull/64550)\n* Fixed bug that causes Windows desktop connection errors on EC2 joined nodes. [#64546](https://github.com/gravitational/teleport/pull/64546)\n* Fixed `tsh login --request-id` to display up to date profile information including the assumed access request and roles. [#64537](https://github.com/gravitational/teleport/pull/64537)\n* Fixed error handling around empty uploads to ensure upload resources are consistently cleaned up. [#64501](https://github.com/gravitational/teleport/pull/64501)\n* Update Go to v1.25.8. [#64435](https://github.com/gravitational/teleport/pull/64435)\n* Fixed failures to record extra large session events in synchronous recording modes. [#64344](https://github.com/gravitational/teleport/pull/64344)\n* Fixed a rare race condition causing initial node heartbeats to be missing an address. [#64331](https://github.com/gravitational/teleport/pull/64331)\n\nEnterprise:\n* Fix Okta assignment reconciliation failing for applications with large user lists where the API response time exceeded the 30s HTTP client timeout by increase the Okta http connection Timeout to 5 min.\n* Device Trust is now accessible under Zero Trust Access in the web UI.\n* Fixed an error log and a memory leak when manually deleting an okta_assignment resource.\n\n## Download\n\nDownload the current and previous releases of Teleport at https://goteleport.com/download.\n\n## Plugins\n\nDownload the current release of Teleport plugins from the links below.\n* Slack [Linux amd64](https://cdn.teleport.dev/teleport-access-slack-v17.7.23-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-slack-v17.7.23-linux-arm64-bin.tar.gz) \n* Mattermost [Linux amd64](https://cdn.teleport.dev/teleport-access-mattermost-v17.7.23-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-mattermost-v17.7.23-linux-arm64-bin.tar.gz)\n* Discord [Linux amd64](https://cdn.teleport.dev/teleport-access-discord-v17.7.23-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-discord-v17.7.23-linux-arm64-bin.tar.gz)\n* Terraform Provider [Linux amd64](https://cdn.teleport.dev/terraform-provider-teleport-v17.7.23-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/terraform-provider-teleport-v17.7.23-linux-arm64-bin.tar.gz) | [macOS amd64](https://cdn.teleport.dev/terraform-provider-teleport-v17.7.23-darwin-amd64-bin.tar.gz) | [macOS arm64](https://cdn.teleport.dev/terraform-provider-teleport-v17.7.23-darwin-arm64-bin.tar.gz) | [macOS universal](https://cdn.teleport.dev/terraform-provider-teleport-v17.7.23-darwin-universal-bin.tar.gz)\n* Event Handler [Linux amd64](https://cdn.teleport.dev/teleport-event-handler-v17.7.23-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-event-handler-v17.7.23-linux-arm64-bin.tar.gz) | [macOS amd64](https://cdn.teleport.dev/teleport-event-handler-v17.7.23-darwin-amd64-bin.tar.gz)\n* PagerDuty [Linux amd64](https://cdn.teleport.dev/teleport-access-pagerduty-v17.7.23-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-pagerduty-v17.7.23-linux-arm64-bin.tar.gz)\n* Jira [Linux amd64](https://cdn.teleport.dev/teleport-access-jira-v17.7.23-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-jira-v17.7.23-linux-arm64-bin.tar.gz)\n* Email [Linux amd64](https://cdn.teleport.dev/teleport-access-email-v17.7.23-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-email-v17.7.23-linux-arm64-bin.tar.gz)\n* Microsoft Teams [Linux amd64](https://cdn.teleport.dev/teleport-access-msteams-v17.7.23-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-msteams-v17.7.23-linux-arm64-bin.tar.gz)\n\n---\n\nlabels: security-patch=yes,security-patch-alts=v17.7.22\n","reactions":{"url":"https://api.github.com/repos/gravitational/teleport/releases/315879445/reactions","total_count":2,"+1":2,"-1":0,"laugh":0,"hooray":0,"confused":0,"heart":0,"rocket":0,"eyes":0}},{"url":"https://api.github.com/repos/gravitational/teleport/releases/294110051","assets_url":"https://api.github.com/repos/gravitational/teleport/releases/294110051/assets","upload_url":"https://uploads.github.com/repos/gravitational/teleport/releases/294110051/assets{?name,label}","html_url":"https://github.com/gravitational/teleport/releases/tag/v18.7.2","id":294110051,"author":{"login":"doggydogworld","id":29820606,"node_id":"MDQ6VXNlcjI5ODIwNjA2","avatar_url":"https://avatars.githubusercontent.com/u/29820606?v=4","gravatar_id":"","url":"https://api.github.com/users/doggydogworld","html_url":"https://github.com/doggydogworld","followers_url":"https://api.github.com/users/doggydogworld/followers","following_url":"https://api.github.com/users/doggydogworld/following{/other_user}","gists_url":"https://api.github.com/users/doggydogworld/gists{/gist_id}","starred_url":"https://api.github.com/users/doggydogworld/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/doggydogworld/subscriptions","organizations_url":"https://api.github.com/users/doggydogworld/orgs","repos_url":"https://api.github.com/users/doggydogworld/repos","events_url":"https://api.github.com/users/doggydogworld/events{/privacy}","received_events_url":"https://api.github.com/users/doggydogworld/received_events","type":"User","user_view_type":"public","site_admin":false},"node_id":"RE_kwDOAeGNGc4Rh8Nj","tag_name":"v18.7.2","target_commitish":"master","name":"Teleport 18.7.2","draft":false,"immutable":false,"prerelease":false,"created_at":"2026-03-06T18:44:11Z","updated_at":"2026-03-06T21:36:36Z","published_at":"2026-03-06T21:36:36Z","assets":[],"tarball_url":"https://api.github.com/repos/gravitational/teleport/tarball/v18.7.2","zipball_url":"https://api.github.com/repos/gravitational/teleport/zipball/v18.7.2","body":"## Description\n\n* Added `TeleportAccessMonitoringRuleV1` support to the Teleport Kubernetes operator. [#64368](https://github.com/gravitational/teleport/pull/64368)\n* Added update scoped token support to tctl and update upsert scoped token rpc to not require status. [#64345](https://github.com/gravitational/teleport/pull/64345)\n* Improved performance and reduced resource usage of the database proxy for clusters with large numbers of registered databases. [#64311](https://github.com/gravitational/teleport/pull/64311)\n* Added more helpful messages to `ssm.run` events when there&#39;s a failure in discovering EC2 instances. [#64273](https://github.com/gravitational/teleport/pull/64273)\n* Fixed a bug that could cause desktop connection errors during proxy upgrades for some cluster configurations. [#64258](https://github.com/gravitational/teleport/pull/64258)\n* Fixed an issue where the UI would display a white screen and no error when an error occurred. [#64246](https://github.com/gravitational/teleport/pull/64246)\n* Improve the layout of the web UI&#39;s message of the day. [#64213](https://github.com/gravitational/teleport/pull/64213)\n* Fixed an issue where VNet on Windows could fail to start after an update with the error: `The specified service does not exist as an installed service.`. [#64206](https://github.com/gravitational/teleport/pull/64206)\n* Fixed a bug where audit events could be created forever for an expired access request. [#64180](https://github.com/gravitational/teleport/pull/64180)\n* Add scoped tokens to tctl resource commands. [#64040](https://github.com/gravitational/teleport/pull/64040)\n* Fixed correct reporting of server discovery enrollment failures when the Proxy is not accessible from the target server. [#64007](https://github.com/gravitational/teleport/pull/64007)\n* Fixed an issue that caused Discovery Service to stop working for Discovery Configs, also affecting AWS OIDC resource enrollments created from the UI. [#63970](https://github.com/gravitational/teleport/pull/63970)\n* Added support for session summarizer resources to the Kubernetes operator. [#63884](https://github.com/gravitational/teleport/pull/63884)\n\nEnterprise:\n* Fixed an error log and a memory leak when manually deleting an okta_assignment resource.\n* Fixed a potential panic in Auth service when getting a non-existing plugin without list permissions.\n* Prevented membership modifications for Access Lists synchronized from Entra ID.\n\n## Download\n\nDownload the current and previous releases of Teleport at https://goteleport.com/download.\n\n## Plugins\n\nDownload the current release of Teleport plugins from the links below.\n* Slack [Linux amd64](https://cdn.teleport.dev/teleport-access-slack-v18.7.2-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-slack-v18.7.2-linux-arm64-bin.tar.gz) \n* Mattermost [Linux amd64](https://cdn.teleport.dev/teleport-access-mattermost-v18.7.2-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-mattermost-v18.7.2-linux-arm64-bin.tar.gz)\n* Discord [Linux amd64](https://cdn.teleport.dev/teleport-access-discord-v18.7.2-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-discord-v18.7.2-linux-arm64-bin.tar.gz)\n* Terraform Provider [Linux amd64](https://cdn.teleport.dev/terraform-provider-teleport-v18.7.2-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/terraform-provider-teleport-v18.7.2-linux-arm64-bin.tar.gz) | [macOS amd64](https://cdn.teleport.dev/terraform-provider-teleport-v18.7.2-darwin-amd64-bin.tar.gz) | [macOS arm64](https://cdn.teleport.dev/terraform-provider-teleport-v18.7.2-darwin-arm64-bin.tar.gz) | [macOS universal](https://cdn.teleport.dev/terraform-provider-teleport-v18.7.2-darwin-universal-bin.tar.gz)\n* Event Handler [Linux amd64](https://cdn.teleport.dev/teleport-event-handler-v18.7.2-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-event-handler-v18.7.2-linux-arm64-bin.tar.gz) | [macOS amd64](https://cdn.teleport.dev/teleport-event-handler-v18.7.2-darwin-amd64-bin.tar.gz)\n* PagerDuty [Linux amd64](https://cdn.teleport.dev/teleport-access-pagerduty-v18.7.2-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-pagerduty-v18.7.2-linux-arm64-bin.tar.gz)\n* Jira [Linux amd64](https://cdn.teleport.dev/teleport-access-jira-v18.7.2-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-jira-v18.7.2-linux-arm64-bin.tar.gz)\n* Email [Linux amd64](https://cdn.teleport.dev/teleport-access-email-v18.7.2-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-email-v18.7.2-linux-arm64-bin.tar.gz)\n* Microsoft Teams [Linux amd64](https://cdn.teleport.dev/teleport-access-msteams-v18.7.2-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-msteams-v18.7.2-linux-arm64-bin.tar.gz)\n"},{"url":"https://api.github.com/repos/gravitational/teleport/releases/294135090","assets_url":"https://api.github.com/repos/gravitational/teleport/releases/294135090/assets","upload_url":"https://uploads.github.com/repos/gravitational/teleport/releases/294135090/assets{?name,label}","html_url":"https://github.com/gravitational/teleport/releases/tag/v17.7.20","id":294135090,"author":{"login":"doggydogworld","id":29820606,"node_id":"MDQ6VXNlcjI5ODIwNjA2","avatar_url":"https://avatars.githubusercontent.com/u/29820606?v=4","gravatar_id":"","url":"https://api.github.com/users/doggydogworld","html_url":"https://github.com/doggydogworld","followers_url":"https://api.github.com/users/doggydogworld/followers","following_url":"https://api.github.com/users/doggydogworld/following{/other_user}","gists_url":"https://api.github.com/users/doggydogworld/gists{/gist_id}","starred_url":"https://api.github.com/users/doggydogworld/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/doggydogworld/subscriptions","organizations_url":"https://api.github.com/users/doggydogworld/orgs","repos_url":"https://api.github.com/users/doggydogworld/repos","events_url":"https://api.github.com/users/doggydogworld/events{/privacy}","received_events_url":"https://api.github.com/users/doggydogworld/received_events","type":"User","user_view_type":"public","site_admin":false},"node_id":"RE_kwDOAeGNGc4RiCUy","tag_name":"v17.7.20","target_commitish":"master","name":"Teleport 17.7.20","draft":false,"immutable":false,"prerelease":false,"created_at":"2026-03-06T18:23:17Z","updated_at":"2026-03-06T23:09:50Z","published_at":"2026-03-06T23:09:50Z","assets":[],"tarball_url":"https://api.github.com/repos/gravitational/teleport/tarball/v17.7.20","zipball_url":"https://api.github.com/repos/gravitational/teleport/zipball/v17.7.20","body":"## Description\n\n* Fix a bug where audit events could be created forever for an expired access request. [#64355](https://github.com/gravitational/teleport/pull/64355)\n* Fixed an issue where the UI would display a white screen and no error when an error occurred. [#64245](https://github.com/gravitational/teleport/pull/64245)\n* Fixed a bug that could cause desktop connection errors during proxy upgrades for some cluster configurations. [#64224](https://github.com/gravitational/teleport/pull/64224)\n* Improve the layout of the web UI&#39;s message of the day. [#64212](https://github.com/gravitational/teleport/pull/64212)\n* Fixed an issue where VNet on Windows could fail to start after an update with the error: `The specified service does not exist as an installed service.`. [#64207](https://github.com/gravitational/teleport/pull/64207)\n* Fixed db session page refresh redirecting to empty page. [#63988](https://github.com/gravitational/teleport/pull/63988)\n* Fixed out of sequent audit logs rendering in ui for same timestamp logs. [#63819](https://github.com/gravitational/teleport/pull/63819)\n* Fixed `tsh kubectl` failing when kubectl flags appear before positional arguments (e.g., `tsh kubectl -n default get pod`). [#63808](https://github.com/gravitational/teleport/pull/63808)\n* Added `tctl recordings download` command to download session recordings to local files without requiring direct access to the storage backend. [#63727](https://github.com/gravitational/teleport/pull/63727)\n* Fixed a bug that could cause Windows desktops discovered via LDAP to be removed in error. [#62472](https://github.com/gravitational/teleport/pull/62472)\n\nEnterprise:\n* Fix an error log and a memory leak when manually deleting an okta_assignment resource.\n* Fix a potential panic in Auth service when getting a non-existing plugin without list permissions.\n\n## Download\n\nDownload the current and previous releases of Teleport at https://goteleport.com/download.\n\n## Plugins\n\nDownload the current release of Teleport plugins from the links below.\n* Slack [Linux amd64](https://cdn.teleport.dev/teleport-access-slack-v17.7.20-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-slack-v17.7.20-linux-arm64-bin.tar.gz) \n* Mattermost [Linux amd64](https://cdn.teleport.dev/teleport-access-mattermost-v17.7.20-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-mattermost-v17.7.20-linux-arm64-bin.tar.gz)\n* Discord [Linux amd64](https://cdn.teleport.dev/teleport-access-discord-v17.7.20-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-discord-v17.7.20-linux-arm64-bin.tar.gz)\n* Terraform Provider [Linux amd64](https://cdn.teleport.dev/terraform-provider-teleport-v17.7.20-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/terraform-provider-teleport-v17.7.20-linux-arm64-bin.tar.gz) | [macOS amd64](https://cdn.teleport.dev/terraform-provider-teleport-v17.7.20-darwin-amd64-bin.tar.gz) | [macOS arm64](https://cdn.teleport.dev/terraform-provider-teleport-v17.7.20-darwin-arm64-bin.tar.gz) | [macOS universal](https://cdn.teleport.dev/terraform-provider-teleport-v17.7.20-darwin-universal-bin.tar.gz)\n* Event Handler [Linux amd64](https://cdn.teleport.dev/teleport-event-handler-v17.7.20-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-event-handler-v17.7.20-linux-arm64-bin.tar.gz) | [macOS amd64](https://cdn.teleport.dev/teleport-event-handler-v17.7.20-darwin-amd64-bin.tar.gz)\n* PagerDuty [Linux amd64](https://cdn.teleport.dev/teleport-access-pagerduty-v17.7.20-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-pagerduty-v17.7.20-linux-arm64-bin.tar.gz)\n* Jira [Linux amd64](https://cdn.teleport.dev/teleport-access-jira-v17.7.20-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-jira-v17.7.20-linux-arm64-bin.tar.gz)\n* Email [Linux amd64](https://cdn.teleport.dev/teleport-access-email-v17.7.20-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-email-v17.7.20-linux-arm64-bin.tar.gz)\n* Microsoft Teams [Linux amd64](https://cdn.teleport.dev/teleport-access-msteams-v17.7.20-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-msteams-v17.7.20-linux-arm64-bin.tar.gz)\n"},{"url":"https://api.github.com/repos/gravitational/teleport/releases/290460155","assets_url":"https://api.github.com/repos/gravitational/teleport/releases/290460155/assets","upload_url":"https://uploads.github.com/repos/gravitational/teleport/releases/290460155/assets{?name,label}","html_url":"https://github.com/gravitational/teleport/releases/tag/v18.7.1","id":290460155,"author":{"login":"aadc-dev","id":215184129,"node_id":"U_kgDODNNzAQ","avatar_url":"https://avatars.githubusercontent.com/u/215184129?v=4","gravatar_id":"","url":"https://api.github.com/users/aadc-dev","html_url":"https://github.com/aadc-dev","followers_url":"https://api.github.com/users/aadc-dev/followers","following_url":"https://api.github.com/users/aadc-dev/following{/other_user}","gists_url":"https://api.github.com/users/aadc-dev/gists{/gist_id}","starred_url":"https://api.github.com/users/aadc-dev/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/aadc-dev/subscriptions","organizations_url":"https://api.github.com/users/aadc-dev/orgs","repos_url":"https://api.github.com/users/aadc-dev/repos","events_url":"https://api.github.com/users/aadc-dev/events{/privacy}","received_events_url":"https://api.github.com/users/aadc-dev/received_events","type":"User","user_view_type":"public","site_admin":false},"node_id":"RE_kwDOAeGNGc4RUBH7","tag_name":"v18.7.1","target_commitish":"master","name":"Teleport 18.7.1","draft":false,"immutable":false,"prerelease":false,"created_at":"2026-02-25T01:38:30Z","updated_at":"2026-02-25T16:40:04Z","published_at":"2026-02-25T16:40:04Z","assets":[],"tarball_url":"https://api.github.com/repos/gravitational/teleport/tarball/v18.7.1","zipball_url":"https://api.github.com/repos/gravitational/teleport/zipball/v18.7.1","body":"## Description\n\n* Fixed web app access in leaf clusters when VNet is enabled. [#63993](https://github.com/gravitational/teleport/pull/63993)\n* Fixed an issue where desktop session recordings would show a white screen instead of the recording player, and fixed an issue where if a session&#39;s metadata failed to load and the session had a summary it didn&#39;t display the summary. [#63982](https://github.com/gravitational/teleport/pull/63982)\n* Fixed db session page refresh redirecting to empty page. [#63938](https://github.com/gravitational/teleport/pull/63938)\n* Improved the performance of `tsh` and `tctl` when the profile directory is on a remote filesystem (NFS, SMB, etc.). [#63937](https://github.com/gravitational/teleport/pull/63937)\n* Added platform information to ssm.run events when auto discovering EC2 instances. [#63925](https://github.com/gravitational/teleport/pull/63925)\n* Added server side secret obfuscating for GetScopedTokens rpc and added UpsertScopedToken rpc. [#63902](https://github.com/gravitational/teleport/pull/63902)\n\nEnterprise:\n* Clarified MS Teams enrollment configuration values.\n\n## Download\n\nDownload the current and previous releases of Teleport at https://goteleport.com/download.\n\n## Plugins\n\nDownload the current release of Teleport plugins from the links below.\n* Slack [Linux amd64](https://cdn.teleport.dev/teleport-access-slack-v18.7.1-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-slack-v18.7.1-linux-arm64-bin.tar.gz) \n* Mattermost [Linux amd64](https://cdn.teleport.dev/teleport-access-mattermost-v18.7.1-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-mattermost-v18.7.1-linux-arm64-bin.tar.gz)\n* Discord [Linux amd64](https://cdn.teleport.dev/teleport-access-discord-v18.7.1-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-discord-v18.7.1-linux-arm64-bin.tar.gz)\n* Terraform Provider [Linux amd64](https://cdn.teleport.dev/terraform-provider-teleport-v18.7.1-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/terraform-provider-teleport-v18.7.1-linux-arm64-bin.tar.gz) | [macOS amd64](https://cdn.teleport.dev/terraform-provider-teleport-v18.7.1-darwin-amd64-bin.tar.gz) | [macOS arm64](https://cdn.teleport.dev/terraform-provider-teleport-v18.7.1-darwin-arm64-bin.tar.gz) | [macOS universal](https://cdn.teleport.dev/terraform-provider-teleport-v18.7.1-darwin-universal-bin.tar.gz)\n* Event Handler [Linux amd64](https://cdn.teleport.dev/teleport-event-handler-v18.7.1-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-event-handler-v18.7.1-linux-arm64-bin.tar.gz) | [macOS amd64](https://cdn.teleport.dev/teleport-event-handler-v18.7.1-darwin-amd64-bin.tar.gz)\n* PagerDuty [Linux amd64](https://cdn.teleport.dev/teleport-access-pagerduty-v18.7.1-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-pagerduty-v18.7.1-linux-arm64-bin.tar.gz)\n* Jira [Linux amd64](https://cdn.teleport.dev/teleport-access-jira-v18.7.1-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-jira-v18.7.1-linux-arm64-bin.tar.gz)\n* Email [Linux amd64](https://cdn.teleport.dev/teleport-access-email-v18.7.1-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-email-v18.7.1-linux-arm64-bin.tar.gz)\n* Microsoft Teams [Linux amd64](https://cdn.teleport.dev/teleport-access-msteams-v18.7.1-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-msteams-v18.7.1-linux-arm64-bin.tar.gz)\n"},{"url":"https://api.github.com/repos/gravitational/teleport/releases/287457200","assets_url":"https://api.github.com/repos/gravitational/teleport/releases/287457200/assets","upload_url":"https://uploads.github.com/repos/gravitational/teleport/releases/287457200/assets{?name,label}","html_url":"https://github.com/gravitational/teleport/releases/tag/v18.7.0","id":287457200,"author":{"login":"mjsmithnh","id":4805850,"node_id":"MDQ6VXNlcjQ4MDU4NTA=","avatar_url":"https://avatars.githubusercontent.com/u/4805850?v=4","gravatar_id":"","url":"https://api.github.com/users/mjsmithnh","html_url":"https://github.com/mjsmithnh","followers_url":"https://api.github.com/users/mjsmithnh/followers","following_url":"https://api.github.com/users/mjsmithnh/following{/other_user}","gists_url":"https://api.github.com/users/mjsmithnh/gists{/gist_id}","starred_url":"https://api.github.com/users/mjsmithnh/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mjsmithnh/subscriptions","organizations_url":"https://api.github.com/users/mjsmithnh/orgs","repos_url":"https://api.github.com/users/mjsmithnh/repos","events_url":"https://api.github.com/users/mjsmithnh/events{/privacy}","received_events_url":"https://api.github.com/users/mjsmithnh/received_events","type":"User","user_view_type":"public","site_admin":false},"node_id":"RE_kwDOAeGNGc4RIj-w","tag_name":"v18.7.0","target_commitish":"master","name":"Teleport 18.7.0","draft":false,"immutable":false,"prerelease":false,"created_at":"2026-02-17T19:48:10Z","updated_at":"2026-05-20T20:45:25Z","published_at":"2026-02-17T23:03:36Z","assets":[],"tarball_url":"https://api.github.com/repos/gravitational/teleport/tarball/v18.7.0","zipball_url":"https://api.github.com/repos/gravitational/teleport/zipball/v18.7.0","body":"## Description\r\n\r\n#### Session timeline view for Identity Security\r\n\r\nSession player for Identity Security users received an enhanced timeline view with\r\nper-command session breakdown.\r\n\r\n#### Organization-level auto-discovery for AWS EC2 instances\r\n\r\nAWS auto-discovery supports EC2 instance enrollment from all or a subset of accounts\r\nof an AWS organization without having to configure per-account discovery.\r\n\r\nOrganization-level discovery for other resources within AWS (RDS, EKS) as well as other\r\nfor cloud providers will follow in future releases.\r\n\r\n#### Terraform-native flow for configuration of AWS EC2 auto-discovery\r\n\r\nTeleport provides in-product UX for configuring EC2 auto-discovery in a single AWS\r\naccount using terraform module.\r\n\r\n#### Static labels for auto-discovered Windows desktops\r\n\r\nTeleport can now be configured to apply a set of static labels to Windows\r\ndesktops that it discovers via LDAP. This is an alternative to setting labels\r\nbased on the value of LDAP attributes.\r\n\r\n#### Entra ID integration status page\r\n\r\nTeleport users are now able to see status of the configured Entra ID integration in the\r\nweb UI.\r\n\r\n#### Inventory UI\r\n\r\nTeleport&#39;s web UI now includes a new page showing the complete inventory of all instances\r\nand bots connected to the cluster.\r\n\r\n#### Managed Updates UI\r\n\r\nTeleport&#39;s web UI now includes new functionality for working with managed updates.\r\nThe UI offers the ability to view and manage the updater configuration as well\r\nas monitor the progress of update rollouts.\r\n\r\n#### Split Windows CA\r\n\r\nTeleport now introduces a new Windows CA responsible for issuing user certificates for\r\nWindows Desktop access. Currently the User CA issues those certificates, as they are end-user certs.\r\nSplitting the CAs improves Teleport&#39;s security posture by introducing a more specialized CA\r\nand allows both CAs to be rotated independently.\r\n\r\n#### Other fixes and improvements\r\n\r\n* Fixed `tsh kubectl` failing when kubectl flags appear before positional arguments (e.g., `tsh kubectl -n default get pod`). [#63807](https://github.com/gravitational/teleport/pull/63807)\r\n* The tsh status command can now be executed in client-only mode with --client. This skips all server-side operations. [#63786](https://github.com/gravitational/teleport/pull/63786)\r\n* Improved tracing support via `tsh --trace kubectl`. [#63762](https://github.com/gravitational/teleport/pull/63762)\r\n* Added `tctl recordings download` command to download session recordings to local files without requiring direct access to the storage backend. [#63726](https://github.com/gravitational/teleport/pull/63726)\r\n* MWI: Add new `tbot start no-op` helper that starts no services. [#63666](https://github.com/gravitational/teleport/pull/63666)\r\n* Improved performance and user experience of `teleport backend clone`. [#63635](https://github.com/gravitational/teleport/pull/63635)\r\n* Fixed out of sequent audit logs rendering in ui for same timestamp logs. [#63613](https://github.com/gravitational/teleport/pull/63613)\r\n* Added the Windows CA, used to issue Windows Desktop Access user certificates. The Windows CA is initially created as a copy of the User CA, so existing trust relationships are maintained. You may rotate either CA in order to create distinct key material (make sure to consult the Certificate Authority Rotation guide before performing a CA rotation). The Windows CA is a top-level CA entity, so it is reflected in all commands that operate on CAs. Updating both command-line tools and Windows Desktop agents is recommended. [#63547](https://github.com/gravitational/teleport/pull/63547)\r\n* Added support for summarizer resources to the Teleport Terraform provider. [#63534](https://github.com/gravitational/teleport/pull/63534)\r\n* Add Managed Updates dashboard to the WebUI. [#63310](https://github.com/gravitational/teleport/pull/63310)\r\n* Fixed a bug that could cause Windows desktops discovered via LDAP to be removed in error. [#62471](https://github.com/gravitational/teleport/pull/62471)\r\n* Fixed an issue that could cause failed Active Directory user lookups to cache the error rather than retry. [#62471](https://github.com/gravitational/teleport/pull/62471)\r\n* Ensure that discovered Windows desktops don&#39;t expire when a large discovery interval is configured. [#62471](https://github.com/gravitational/teleport/pull/62471)\r\n* Each Windows desktop `discovery_config` can now include a set of static labels to apply to discovered hosts. [#62452](https://github.com/gravitational/teleport/pull/62452)\r\n* Added support for discovering EC2 instances in all the accounts under an AWS Organization. [#62302](https://github.com/gravitational/teleport/pull/62302)\r\n* Added support for EC2 instances to join based on their AWS Organization. [#62302](https://github.com/gravitational/teleport/pull/62302)\r\n\r\nEnterprise:\r\n* Updated Entra ID plugin UI to support Access List owners source configuration.\r\n* Fixes a panic that occurred when External Audit Storage was available but not enabled in Teleport Cloud while Access Monitoring was enabled.\r\n* Added plugin status page for Teleport Entra ID integration.\r\n\r\n## Download\r\n\r\nDownload the current and previous releases of Teleport at https://goteleport.com/download.\r\n\r\n## Plugins\r\n\r\nDownload the current release of Teleport plugins from the links below.\r\n* Slack [Linux amd64](https://cdn.teleport.dev/teleport-access-slack-v18.7.0-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-slack-v18.7.0-linux-arm64-bin.tar.gz) \r\n* Mattermost [Linux amd64](https://cdn.teleport.dev/teleport-access-mattermost-v18.7.0-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-mattermost-v18.7.0-linux-arm64-bin.tar.gz)\r\n* Discord [Linux amd64](https://cdn.teleport.dev/teleport-access-discord-v18.7.0-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-discord-v18.7.0-linux-arm64-bin.tar.gz)\r\n* Terraform Provider [Linux amd64](https://cdn.teleport.dev/terraform-provider-teleport-v18.7.0-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/terraform-provider-teleport-v18.7.0-linux-arm64-bin.tar.gz) | [macOS amd64](https://cdn.teleport.dev/terraform-provider-teleport-v18.7.0-darwin-amd64-bin.tar.gz) | [macOS arm64](https://cdn.teleport.dev/terraform-provider-teleport-v18.7.0-darwin-arm64-bin.tar.gz) | [macOS universal](https://cdn.teleport.dev/terraform-provider-teleport-v18.7.0-darwin-universal-bin.tar.gz)\r\n* Event Handler [Linux amd64](https://cdn.teleport.dev/teleport-event-handler-v18.7.0-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-event-handler-v18.7.0-linux-arm64-bin.tar.gz) | [macOS amd64](https://cdn.teleport.dev/teleport-event-handler-v18.7.0-darwin-amd64-bin.tar.gz)\r\n* PagerDuty [Linux amd64](https://cdn.teleport.dev/teleport-access-pagerduty-v18.7.0-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-pagerduty-v18.7.0-linux-arm64-bin.tar.gz)\r\n* Jira [Linux amd64](https://cdn.teleport.dev/teleport-access-jira-v18.7.0-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-jira-v18.7.0-linux-arm64-bin.tar.gz)\r\n* Email [Linux amd64](https://cdn.teleport.dev/teleport-access-email-v18.7.0-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-email-v18.7.0-linux-arm64-bin.tar.gz)\r\n* Microsoft Teams [Linux amd64](https://cdn.teleport.dev/teleport-access-msteams-v18.7.0-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-msteams-v18.7.0-linux-arm64-bin.tar.gz)\r\n"},{"url":"https://api.github.com/repos/gravitational/teleport/releases/285041057","assets_url":"https://api.github.com/repos/gravitational/teleport/releases/285041057/assets","upload_url":"https://uploads.github.com/repos/gravitational/teleport/releases/285041057/assets{?name,label}","html_url":"https://github.com/gravitational/teleport/releases/tag/v18.6.8","id":285041057,"author":{"login":"doggydogworld","id":29820606,"node_id":"MDQ6VXNlcjI5ODIwNjA2","avatar_url":"https://avatars.githubusercontent.com/u/29820606?v=4","gravatar_id":"","url":"https://api.github.com/users/doggydogworld","html_url":"https://github.com/doggydogworld","followers_url":"https://api.github.com/users/doggydogworld/followers","following_url":"https://api.github.com/users/doggydogworld/following{/other_user}","gists_url":"https://api.github.com/users/doggydogworld/gists{/gist_id}","starred_url":"https://api.github.com/users/doggydogworld/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/doggydogworld/subscriptions","organizations_url":"https://api.github.com/users/doggydogworld/orgs","repos_url":"https://api.github.com/users/doggydogworld/repos","events_url":"https://api.github.com/users/doggydogworld/events{/privacy}","received_events_url":"https://api.github.com/users/doggydogworld/received_events","type":"User","user_view_type":"public","site_admin":false},"node_id":"RE_kwDOAeGNGc4Q_WGh","tag_name":"v18.6.8","target_commitish":"master","name":"Teleport 18.6.8","draft":false,"immutable":false,"prerelease":false,"created_at":"2026-02-10T19:46:59Z","updated_at":"2026-02-10T23:21:13Z","published_at":"2026-02-10T23:21:13Z","assets":[],"tarball_url":"https://api.github.com/repos/gravitational/teleport/tarball/v18.6.8","zipball_url":"https://api.github.com/repos/gravitational/teleport/zipball/v18.6.8","body":"## Description\n\n* Added `--exec-cmd` and `--exec-arg` flags to `tsh proxy kube` to allow launching custom commands like k9s directly without requiring environment variable workarounds. [#63066](https://github.com/gravitational/teleport/pull/63066)\n\nEnterprise:\n* Fixes a panic that occurred when External Audit Storage was available but not enabled in Teleport Cloud while Access Monitoring was enabled.\n\n## Download\n\nDownload the current and previous releases of Teleport at https://goteleport.com/download.\n\n## Plugins\n\nDownload the current release of Teleport plugins from the links below.\n* Slack [Linux amd64](https://cdn.teleport.dev/teleport-access-slack-v18.6.8-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-slack-v18.6.8-linux-arm64-bin.tar.gz) \n* Mattermost [Linux amd64](https://cdn.teleport.dev/teleport-access-mattermost-v18.6.8-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-mattermost-v18.6.8-linux-arm64-bin.tar.gz)\n* Discord [Linux amd64](https://cdn.teleport.dev/teleport-access-discord-v18.6.8-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-discord-v18.6.8-linux-arm64-bin.tar.gz)\n* Terraform Provider [Linux amd64](https://cdn.teleport.dev/terraform-provider-teleport-v18.6.8-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/terraform-provider-teleport-v18.6.8-linux-arm64-bin.tar.gz) | [macOS amd64](https://cdn.teleport.dev/terraform-provider-teleport-v18.6.8-darwin-amd64-bin.tar.gz) | [macOS arm64](https://cdn.teleport.dev/terraform-provider-teleport-v18.6.8-darwin-arm64-bin.tar.gz) | [macOS universal](https://cdn.teleport.dev/terraform-provider-teleport-v18.6.8-darwin-universal-bin.tar.gz)\n* Event Handler [Linux amd64](https://cdn.teleport.dev/teleport-event-handler-v18.6.8-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-event-handler-v18.6.8-linux-arm64-bin.tar.gz) | [macOS amd64](https://cdn.teleport.dev/teleport-event-handler-v18.6.8-darwin-amd64-bin.tar.gz)\n* PagerDuty [Linux amd64](https://cdn.teleport.dev/teleport-access-pagerduty-v18.6.8-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-pagerduty-v18.6.8-linux-arm64-bin.tar.gz)\n* Jira [Linux amd64](https://cdn.teleport.dev/teleport-access-jira-v18.6.8-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-jira-v18.6.8-linux-arm64-bin.tar.gz)\n* Email [Linux amd64](https://cdn.teleport.dev/teleport-access-email-v18.6.8-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-email-v18.6.8-linux-arm64-bin.tar.gz)\n* Microsoft Teams [Linux amd64](https://cdn.teleport.dev/teleport-access-msteams-v18.6.8-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-msteams-v18.6.8-linux-arm64-bin.tar.gz)\n"},{"url":"https://api.github.com/repos/gravitational/teleport/releases/285050768","assets_url":"https://api.github.com/repos/gravitational/teleport/releases/285050768/assets","upload_url":"https://uploads.github.com/repos/gravitational/teleport/releases/285050768/assets{?name,label}","html_url":"https://github.com/gravitational/teleport/releases/tag/v17.7.19","id":285050768,"author":{"login":"doggydogworld","id":29820606,"node_id":"MDQ6VXNlcjI5ODIwNjA2","avatar_url":"https://avatars.githubusercontent.com/u/29820606?v=4","gravatar_id":"","url":"https://api.github.com/users/doggydogworld","html_url":"https://github.com/doggydogworld","followers_url":"https://api.github.com/users/doggydogworld/followers","following_url":"https://api.github.com/users/doggydogworld/following{/other_user}","gists_url":"https://api.github.com/users/doggydogworld/gists{/gist_id}","starred_url":"https://api.github.com/users/doggydogworld/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/doggydogworld/subscriptions","organizations_url":"https://api.github.com/users/doggydogworld/orgs","repos_url":"https://api.github.com/users/doggydogworld/repos","events_url":"https://api.github.com/users/doggydogworld/events{/privacy}","received_events_url":"https://api.github.com/users/doggydogworld/received_events","type":"User","user_view_type":"public","site_admin":false},"node_id":"RE_kwDOAeGNGc4Q_YeQ","tag_name":"v17.7.19","target_commitish":"master","name":"Teleport 17.7.19","draft":false,"immutable":false,"prerelease":false,"created_at":"2026-02-10T19:40:13Z","updated_at":"2026-02-11T00:14:50Z","published_at":"2026-02-11T00:14:50Z","assets":[],"tarball_url":"https://api.github.com/repos/gravitational/teleport/tarball/v17.7.19","zipball_url":"https://api.github.com/repos/gravitational/teleport/zipball/v17.7.19","body":"## Description\n\nEnterprise:\n* Fixes a panic that occurred when External Audit Storage was available but not enabled in Teleport Cloud while Access Monitoring was enabled.\n\n## Download\n\nDownload the current and previous releases of Teleport at https://goteleport.com/download.\n\n## Plugins\n\nDownload the current release of Teleport plugins from the links below.\n* Slack [Linux amd64](https://cdn.teleport.dev/teleport-access-slack-v17.7.19-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-slack-v17.7.19-linux-arm64-bin.tar.gz) \n* Mattermost [Linux amd64](https://cdn.teleport.dev/teleport-access-mattermost-v17.7.19-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-mattermost-v17.7.19-linux-arm64-bin.tar.gz)\n* Discord [Linux amd64](https://cdn.teleport.dev/teleport-access-discord-v17.7.19-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-discord-v17.7.19-linux-arm64-bin.tar.gz)\n* Terraform Provider [Linux amd64](https://cdn.teleport.dev/terraform-provider-teleport-v17.7.19-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/terraform-provider-teleport-v17.7.19-linux-arm64-bin.tar.gz) | [macOS amd64](https://cdn.teleport.dev/terraform-provider-teleport-v17.7.19-darwin-amd64-bin.tar.gz) | [macOS arm64](https://cdn.teleport.dev/terraform-provider-teleport-v17.7.19-darwin-arm64-bin.tar.gz) | [macOS universal](https://cdn.teleport.dev/terraform-provider-teleport-v17.7.19-darwin-universal-bin.tar.gz)\n* Event Handler [Linux amd64](https://cdn.teleport.dev/teleport-event-handler-v17.7.19-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-event-handler-v17.7.19-linux-arm64-bin.tar.gz) | [macOS amd64](https://cdn.teleport.dev/teleport-event-handler-v17.7.19-darwin-amd64-bin.tar.gz)\n* PagerDuty [Linux amd64](https://cdn.teleport.dev/teleport-access-pagerduty-v17.7.19-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-pagerduty-v17.7.19-linux-arm64-bin.tar.gz)\n* Jira [Linux amd64](https://cdn.teleport.dev/teleport-access-jira-v17.7.19-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-jira-v17.7.19-linux-arm64-bin.tar.gz)\n* Email [Linux amd64](https://cdn.teleport.dev/teleport-access-email-v17.7.19-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-email-v17.7.19-linux-arm64-bin.tar.gz)\n* Microsoft Teams [Linux amd64](https://cdn.teleport.dev/teleport-access-msteams-v17.7.19-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-msteams-v17.7.19-linux-arm64-bin.tar.gz)\n"},{"url":"https://api.github.com/repos/gravitational/teleport/releases/284603548","assets_url":"https://api.github.com/repos/gravitational/teleport/releases/284603548/assets","upload_url":"https://uploads.github.com/repos/gravitational/teleport/releases/284603548/assets{?name,label}","html_url":"https://github.com/gravitational/teleport/releases/tag/v18.6.7","id":284603548,"author":{"login":"doggydogworld","id":29820606,"node_id":"MDQ6VXNlcjI5ODIwNjA2","avatar_url":"https://avatars.githubusercontent.com/u/29820606?v=4","gravatar_id":"","url":"https://api.github.com/users/doggydogworld","html_url":"https://github.com/doggydogworld","followers_url":"https://api.github.com/users/doggydogworld/followers","following_url":"https://api.github.com/users/doggydogworld/following{/other_user}","gists_url":"https://api.github.com/users/doggydogworld/gists{/gist_id}","starred_url":"https://api.github.com/users/doggydogworld/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/doggydogworld/subscriptions","organizations_url":"https://api.github.com/users/doggydogworld/orgs","repos_url":"https://api.github.com/users/doggydogworld/repos","events_url":"https://api.github.com/users/doggydogworld/events{/privacy}","received_events_url":"https://api.github.com/users/doggydogworld/received_events","type":"User","user_view_type":"public","site_admin":false},"node_id":"RE_kwDOAeGNGc4Q9rSc","tag_name":"v18.6.7","target_commitish":"master","name":"Teleport 18.6.7","draft":false,"immutable":false,"prerelease":false,"created_at":"2026-02-09T19:07:55Z","updated_at":"2026-02-09T22:54:01Z","published_at":"2026-02-09T22:54:01Z","assets":[],"tarball_url":"https://api.github.com/repos/gravitational/teleport/tarball/v18.6.7","zipball_url":"https://api.github.com/repos/gravitational/teleport/zipball/v18.6.7","body":"## Description\n\n* Revised help messages for event handler CLI commands. [#63620](https://github.com/gravitational/teleport/pull/63620)\n* Fixed `tsh ssh user@foo=bar uptime` from running serially if users did not have `role:read` permissions. [#63612](https://github.com/gravitational/teleport/pull/63612)\n* The minimum version of macOS required to run Teleport or associated client tools is now macOS 12 (Monterey). [#63587](https://github.com/gravitational/teleport/pull/63587)\n* The minimal macOS version required by Teleport Connect is now macOS 12. [#63569](https://github.com/gravitational/teleport/pull/63569)\n* Fixed bug where event handler would throw an error on Athena backend when handling large events. [#63550](https://github.com/gravitational/teleport/pull/63550)\n* Updated Go to 1.25.7. [#63539](https://github.com/gravitational/teleport/pull/63539)\n* Fixed an issue where a role requiring a trusted device could incorrectly block access to all applications. [#63527](https://github.com/gravitational/teleport/pull/63527)\n* Fixed bug where event handler would get stuck on DynamoDB backend when handling large events. [#63526](https://github.com/gravitational/teleport/pull/63526)\n* Updated tsh/Linux to correctly capture the OS login user for device trust. [#63452](https://github.com/gravitational/teleport/pull/63452)\n* Fixed a server error when rejecting a headless authentication request in the Web UI. [#63431](https://github.com/gravitational/teleport/pull/63431)\n* Added opt-in support to use `cert-manager` certificates for `teleport-plugin-event-handler` helm chart. [#63420](https://github.com/gravitational/teleport/pull/63420)\n* Modified `tbot` helm chart with default `token` value to simplify deployment. [#63360](https://github.com/gravitational/teleport/pull/63360)\n* Improved GitHub &#43; Kubernetes guide experience. [#63185](https://github.com/gravitational/teleport/pull/63185)\n* Fixed `teleport join openssh` on recent versions of Ubuntu. [#63040](https://github.com/gravitational/teleport/pull/63040)\n\nEnterprise:\n* Extend Access Monitoring feature to Teleport Cloud customers using External Audit Storage.\n* Added recording and validation for the fixed OS login user values from tsh.\n* Mitigated a race in the Slack token refresh logic.\n\n## Download\n\nDownload the current and previous releases of Teleport at https://goteleport.com/download.\n\n## Plugins\n\nDownload the current release of Teleport plugins from the links below.\n* Slack [Linux amd64](https://cdn.teleport.dev/teleport-access-slack-v18.6.7-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-slack-v18.6.7-linux-arm64-bin.tar.gz) \n* Mattermost [Linux amd64](https://cdn.teleport.dev/teleport-access-mattermost-v18.6.7-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-mattermost-v18.6.7-linux-arm64-bin.tar.gz)\n* Discord [Linux amd64](https://cdn.teleport.dev/teleport-access-discord-v18.6.7-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-discord-v18.6.7-linux-arm64-bin.tar.gz)\n* Terraform Provider [Linux amd64](https://cdn.teleport.dev/terraform-provider-teleport-v18.6.7-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/terraform-provider-teleport-v18.6.7-linux-arm64-bin.tar.gz) | [macOS amd64](https://cdn.teleport.dev/terraform-provider-teleport-v18.6.7-darwin-amd64-bin.tar.gz) | [macOS arm64](https://cdn.teleport.dev/terraform-provider-teleport-v18.6.7-darwin-arm64-bin.tar.gz) | [macOS universal](https://cdn.teleport.dev/terraform-provider-teleport-v18.6.7-darwin-universal-bin.tar.gz)\n* Event Handler [Linux amd64](https://cdn.teleport.dev/teleport-event-handler-v18.6.7-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-event-handler-v18.6.7-linux-arm64-bin.tar.gz) | [macOS amd64](https://cdn.teleport.dev/teleport-event-handler-v18.6.7-darwin-amd64-bin.tar.gz)\n* PagerDuty [Linux amd64](https://cdn.teleport.dev/teleport-access-pagerduty-v18.6.7-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-pagerduty-v18.6.7-linux-arm64-bin.tar.gz)\n* Jira [Linux amd64](https://cdn.teleport.dev/teleport-access-jira-v18.6.7-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-jira-v18.6.7-linux-arm64-bin.tar.gz)\n* Email [Linux amd64](https://cdn.teleport.dev/teleport-access-email-v18.6.7-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-email-v18.6.7-linux-arm64-bin.tar.gz)\n* Microsoft Teams [Linux amd64](https://cdn.teleport.dev/teleport-access-msteams-v18.6.7-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-msteams-v18.6.7-linux-arm64-bin.tar.gz)\n"},{"url":"https://api.github.com/repos/gravitational/teleport/releases/284665819","assets_url":"https://api.github.com/repos/gravitational/teleport/releases/284665819/assets","upload_url":"https://uploads.github.com/repos/gravitational/teleport/releases/284665819/assets{?name,label}","html_url":"https://github.com/gravitational/teleport/releases/tag/v17.7.18","id":284665819,"author":{"login":"doggydogworld","id":29820606,"node_id":"MDQ6VXNlcjI5ODIwNjA2","avatar_url":"https://avatars.githubusercontent.com/u/29820606?v=4","gravatar_id":"","url":"https://api.github.com/users/doggydogworld","html_url":"https://github.com/doggydogworld","followers_url":"https://api.github.com/users/doggydogworld/followers","following_url":"https://api.github.com/users/doggydogworld/following{/other_user}","gists_url":"https://api.github.com/users/doggydogworld/gists{/gist_id}","starred_url":"https://api.github.com/users/doggydogworld/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/doggydogworld/subscriptions","organizations_url":"https://api.github.com/users/doggydogworld/orgs","repos_url":"https://api.github.com/users/doggydogworld/repos","events_url":"https://api.github.com/users/doggydogworld/events{/privacy}","received_events_url":"https://api.github.com/users/doggydogworld/received_events","type":"User","user_view_type":"public","site_admin":false},"node_id":"RE_kwDOAeGNGc4Q96fb","tag_name":"v17.7.18","target_commitish":"master","name":"Teleport 17.7.18","draft":false,"immutable":false,"prerelease":false,"created_at":"2026-02-09T23:44:49Z","updated_at":"2026-02-10T04:52:44Z","published_at":"2026-02-10T04:52:44Z","assets":[],"tarball_url":"https://api.github.com/repos/gravitational/teleport/tarball/v17.7.18","zipball_url":"https://api.github.com/repos/gravitational/teleport/zipball/v17.7.18","body":"## Description\n\nSkipped 17.7.17 due to a build pipeline issue.\n\n* Revised help messages for event handler CLI commands. [#63642](https://github.com/gravitational/teleport/pull/63642)\n* Fixed `tsh ssh user@foo=bar uptime` from running serially if users did not have `role:read` permissions. [#63611](https://github.com/gravitational/teleport/pull/63611)\n* The minimum version of macOS required to run Teleport or associated client tools is now macOS 12 (Monterey). [#63588](https://github.com/gravitational/teleport/pull/63588)\n* The minimal macOS version required by Teleport Connect is now macOS 12. [#63570](https://github.com/gravitational/teleport/pull/63570)\n* Fixed bug where event handler would get stuck on DynamoDB backend when handling large events. [#63562](https://github.com/gravitational/teleport/pull/63562)\n* Updated Go to 1.25.7. [#63561](https://github.com/gravitational/teleport/pull/63561)\n* Fixed bug where event handler would throw an error on Athena backend when handling large events. [#63551](https://github.com/gravitational/teleport/pull/63551)\n* Fixed an issue where a role requiring a trusted device could incorrectly block access to all applications. [#63528](https://github.com/gravitational/teleport/pull/63528)\n* Updated tsh/Linux to correctly capture the OS login user for device trust. [#63453](https://github.com/gravitational/teleport/pull/63453)\n* Fixed a server error when rejecting a headless authentication request in the Web UI. [#63432](https://github.com/gravitational/teleport/pull/63432)\n* Fixed tsh/Linux sending a too-large username for device trust. [#63388](https://github.com/gravitational/teleport/pull/63388)\n* Fixed teleport join openssh on recent versions of Ubuntu. [#63042](https://github.com/gravitational/teleport/pull/63042)\n* Fix an issue in the Teleport SSH Service where interactive PAM Auth modules always fail when trying to run exec sessions with tty allocated. e.g. `tsh ssh --tty &lt;node&gt; ls`. [#62065](https://github.com/gravitational/teleport/pull/62065)\n\nEnterprise:\n* Extend Access Monitoring feature to Teleport Cloud customers using External Audit Storage.\n* Added recording and validation for the fixed OS login user values from tsh.\n\n## Download\n\nDownload the current and previous releases of Teleport at https://goteleport.com/download.\n\n## Plugins\n\nDownload the current release of Teleport plugins from the links below.\n* Slack [Linux amd64](https://cdn.teleport.dev/teleport-access-slack-v17.7.18-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-slack-v17.7.18-linux-arm64-bin.tar.gz) \n* Mattermost [Linux amd64](https://cdn.teleport.dev/teleport-access-mattermost-v17.7.18-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-mattermost-v17.7.18-linux-arm64-bin.tar.gz)\n* Discord [Linux amd64](https://cdn.teleport.dev/teleport-access-discord-v17.7.18-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-discord-v17.7.18-linux-arm64-bin.tar.gz)\n* Terraform Provider [Linux amd64](https://cdn.teleport.dev/terraform-provider-teleport-v17.7.18-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/terraform-provider-teleport-v17.7.18-linux-arm64-bin.tar.gz) | [macOS amd64](https://cdn.teleport.dev/terraform-provider-teleport-v17.7.18-darwin-amd64-bin.tar.gz) | [macOS arm64](https://cdn.teleport.dev/terraform-provider-teleport-v17.7.18-darwin-arm64-bin.tar.gz) | [macOS universal](https://cdn.teleport.dev/terraform-provider-teleport-v17.7.18-darwin-universal-bin.tar.gz)\n* Event Handler [Linux amd64](https://cdn.teleport.dev/teleport-event-handler-v17.7.18-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-event-handler-v17.7.18-linux-arm64-bin.tar.gz) | [macOS amd64](https://cdn.teleport.dev/teleport-event-handler-v17.7.18-darwin-amd64-bin.tar.gz)\n* PagerDuty [Linux amd64](https://cdn.teleport.dev/teleport-access-pagerduty-v17.7.18-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-pagerduty-v17.7.18-linux-arm64-bin.tar.gz)\n* Jira [Linux amd64](https://cdn.teleport.dev/teleport-access-jira-v17.7.18-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-jira-v17.7.18-linux-arm64-bin.tar.gz)\n* Email [Linux amd64](https://cdn.teleport.dev/teleport-access-email-v17.7.18-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-email-v17.7.18-linux-arm64-bin.tar.gz)\n* Microsoft Teams [Linux amd64](https://cdn.teleport.dev/teleport-access-msteams-v17.7.18-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-msteams-v17.7.18-linux-arm64-bin.tar.gz)\n"},{"url":"https://api.github.com/repos/gravitational/teleport/releases/282431575","assets_url":"https://api.github.com/repos/gravitational/teleport/releases/282431575/assets","upload_url":"https://uploads.github.com/repos/gravitational/teleport/releases/282431575/assets{?name,label}","html_url":"https://github.com/gravitational/teleport/releases/tag/v18.6.6","id":282431575,"author":{"login":"camscale","id":35285934,"node_id":"MDQ6VXNlcjM1Mjg1OTM0","avatar_url":"https://avatars.githubusercontent.com/u/35285934?v=4","gravatar_id":"","url":"https://api.github.com/users/camscale","html_url":"https://github.com/camscale","followers_url":"https://api.github.com/users/camscale/followers","following_url":"https://api.github.com/users/camscale/following{/other_user}","gists_url":"https://api.github.com/users/camscale/gists{/gist_id}","starred_url":"https://api.github.com/users/camscale/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/camscale/subscriptions","organizations_url":"https://api.github.com/users/camscale/orgs","repos_url":"https://api.github.com/users/camscale/repos","events_url":"https://api.github.com/users/camscale/events{/privacy}","received_events_url":"https://api.github.com/users/camscale/received_events","type":"User","user_view_type":"public","site_admin":false},"node_id":"RE_kwDOAeGNGc4Q1ZBX","tag_name":"v18.6.6","target_commitish":"master","name":"Teleport 18.6.6","draft":false,"immutable":false,"prerelease":false,"created_at":"2026-02-02T23:39:44Z","updated_at":"2026-02-03T06:30:35Z","published_at":"2026-02-03T06:30:35Z","assets":[],"tarball_url":"https://api.github.com/repos/gravitational/teleport/tarball/v18.6.6","zipball_url":"https://api.github.com/repos/gravitational/teleport/zipball/v18.6.6","body":"## Description\n\n* Fixed tsh/Linux sending a too-large username for device trust. [#63387](https://github.com/gravitational/teleport/pull/63387)\n* Fixed an issue where MCP JSON-RPC messages with mixed-case field names could be parsed inconsistently and re-serialized to lower cases. Teleport now enforces canonical lowercase JSON-RPC fields. [#63364](https://github.com/gravitational/teleport/pull/63364)\n* Improved robustness of the Slack hosted plugin to reduce the likeliness of failed token refresh when experiencing external disruption. [#63344](https://github.com/gravitational/teleport/pull/63344)\n* Fixed a bug affecting access list review queries for lists where the name is a prefix of another list name. [#63337](https://github.com/gravitational/teleport/pull/63337)\n* Updated the OCI SDK to support new regions. [#63265](https://github.com/gravitational/teleport/pull/63265)\n* Ensure application session rejections for untrusted devices are consistently audited as AppSessionStart failures after MFA. [#63149](https://github.com/gravitational/teleport/pull/63149)\n* Added Helm chart support to the `teleport-event-handler configure` command. [#63147](https://github.com/gravitational/teleport/pull/63147)\n* Added `tctl` support for removing `okta_assignment` internal resource should it be needed. [#62698](https://github.com/gravitational/teleport/pull/62698)\n\nEnterprise:\n* Prevented manual membership changes to SCIM-type access lists while enabling support for their reviews.\n* Fixed the issue where Okta integration may not remove previously synced apps after plugin restart.\n\n## Download\n\nDownload the current and previous releases of Teleport at https://goteleport.com/download.\n\n## Plugins\n\nDownload the current release of Teleport plugins from the links below.\n* Slack [Linux amd64](https://cdn.teleport.dev/teleport-access-slack-v18.6.6-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-slack-v18.6.6-linux-arm64-bin.tar.gz) \n* Mattermost [Linux amd64](https://cdn.teleport.dev/teleport-access-mattermost-v18.6.6-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-mattermost-v18.6.6-linux-arm64-bin.tar.gz)\n* Discord [Linux amd64](https://cdn.teleport.dev/teleport-access-discord-v18.6.6-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-discord-v18.6.6-linux-arm64-bin.tar.gz)\n* Terraform Provider [Linux amd64](https://cdn.teleport.dev/terraform-provider-teleport-v18.6.6-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/terraform-provider-teleport-v18.6.6-linux-arm64-bin.tar.gz) | [macOS amd64](https://cdn.teleport.dev/terraform-provider-teleport-v18.6.6-darwin-amd64-bin.tar.gz) | [macOS arm64](https://cdn.teleport.dev/terraform-provider-teleport-v18.6.6-darwin-arm64-bin.tar.gz) | [macOS universal](https://cdn.teleport.dev/terraform-provider-teleport-v18.6.6-darwin-universal-bin.tar.gz)\n* Event Handler [Linux amd64](https://cdn.teleport.dev/teleport-event-handler-v18.6.6-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-event-handler-v18.6.6-linux-arm64-bin.tar.gz) | [macOS amd64](https://cdn.teleport.dev/teleport-event-handler-v18.6.6-darwin-amd64-bin.tar.gz)\n* PagerDuty [Linux amd64](https://cdn.teleport.dev/teleport-access-pagerduty-v18.6.6-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-pagerduty-v18.6.6-linux-arm64-bin.tar.gz)\n* Jira [Linux amd64](https://cdn.teleport.dev/teleport-access-jira-v18.6.6-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-jira-v18.6.6-linux-arm64-bin.tar.gz)\n* Email [Linux amd64](https://cdn.teleport.dev/teleport-access-email-v18.6.6-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-email-v18.6.6-linux-arm64-bin.tar.gz)\n* Microsoft Teams [Linux amd64](https://cdn.teleport.dev/teleport-access-msteams-v18.6.6-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-msteams-v18.6.6-linux-arm64-bin.tar.gz)\n"},{"url":"https://api.github.com/repos/gravitational/teleport/releases/282359096","assets_url":"https://api.github.com/repos/gravitational/teleport/releases/282359096/assets","upload_url":"https://uploads.github.com/repos/gravitational/teleport/releases/282359096/assets{?name,label}","html_url":"https://github.com/gravitational/teleport/releases/tag/v17.7.16","id":282359096,"author":{"login":"aadc-dev","id":215184129,"node_id":"U_kgDODNNzAQ","avatar_url":"https://avatars.githubusercontent.com/u/215184129?v=4","gravatar_id":"","url":"https://api.github.com/users/aadc-dev","html_url":"https://github.com/aadc-dev","followers_url":"https://api.github.com/users/aadc-dev/followers","following_url":"https://api.github.com/users/aadc-dev/following{/other_user}","gists_url":"https://api.github.com/users/aadc-dev/gists{/gist_id}","starred_url":"https://api.github.com/users/aadc-dev/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/aadc-dev/subscriptions","organizations_url":"https://api.github.com/users/aadc-dev/orgs","repos_url":"https://api.github.com/users/aadc-dev/repos","events_url":"https://api.github.com/users/aadc-dev/events{/privacy}","received_events_url":"https://api.github.com/users/aadc-dev/received_events","type":"User","user_view_type":"public","site_admin":false},"node_id":"RE_kwDOAeGNGc4Q1HU4","tag_name":"v17.7.16","target_commitish":"master","name":"Teleport 17.7.16","draft":false,"immutable":false,"prerelease":false,"created_at":"2026-02-02T16:22:15Z","updated_at":"2026-02-03T00:20:51Z","published_at":"2026-02-03T00:20:51Z","assets":[],"tarball_url":"https://api.github.com/repos/gravitational/teleport/tarball/v17.7.16","zipball_url":"https://api.github.com/repos/gravitational/teleport/zipball/v17.7.16","body":"## Description\n\n* Improved robustness of the Slack hosted plugin to reduce the likeliness of failed token refresh when experiencing external disruption. [#63347](https://github.com/gravitational/teleport/pull/63347)\n* Ensure application session rejections for untrusted devices are consistently audited as AppSessionStart failures after MFA. [#63260](https://github.com/gravitational/teleport/pull/63260)\n* Fixed a `CredentialContainer` error when attempting to log in to the Web UI with a hardware key using Firefox &gt;=147.0.2. [#63246](https://github.com/gravitational/teleport/pull/63246)\n* Updated OpenSSL to 3.0.19. [#63203](https://github.com/gravitational/teleport/pull/63203)\n\nEnterprise:\n* Mitigated a race in the Slack token refresh logic.\n* Fixe the issue where Okta integration may not remove previously synced apps after plugin restart.\n* Added support for multi-arch lock file population for the terraform provider.\n\n## Download\n\nDownload the current and previous releases of Teleport at https://goteleport.com/download.\n\n## Plugins\n\nDownload the current release of Teleport plugins from the links below.\n* Slack [Linux amd64](https://cdn.teleport.dev/teleport-access-slack-v17.7.16-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-slack-v17.7.16-linux-arm64-bin.tar.gz) \n* Mattermost [Linux amd64](https://cdn.teleport.dev/teleport-access-mattermost-v17.7.16-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-mattermost-v17.7.16-linux-arm64-bin.tar.gz)\n* Discord [Linux amd64](https://cdn.teleport.dev/teleport-access-discord-v17.7.16-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-discord-v17.7.16-linux-arm64-bin.tar.gz)\n* Terraform Provider [Linux amd64](https://cdn.teleport.dev/terraform-provider-teleport-v17.7.16-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/terraform-provider-teleport-v17.7.16-linux-arm64-bin.tar.gz) | [macOS amd64](https://cdn.teleport.dev/terraform-provider-teleport-v17.7.16-darwin-amd64-bin.tar.gz) | [macOS arm64](https://cdn.teleport.dev/terraform-provider-teleport-v17.7.16-darwin-arm64-bin.tar.gz) | [macOS universal](https://cdn.teleport.dev/terraform-provider-teleport-v17.7.16-darwin-universal-bin.tar.gz)\n* Event Handler [Linux amd64](https://cdn.teleport.dev/teleport-event-handler-v17.7.16-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-event-handler-v17.7.16-linux-arm64-bin.tar.gz) | [macOS amd64](https://cdn.teleport.dev/teleport-event-handler-v17.7.16-darwin-amd64-bin.tar.gz)\n* PagerDuty [Linux amd64](https://cdn.teleport.dev/teleport-access-pagerduty-v17.7.16-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-pagerduty-v17.7.16-linux-arm64-bin.tar.gz)\n* Jira [Linux amd64](https://cdn.teleport.dev/teleport-access-jira-v17.7.16-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-jira-v17.7.16-linux-arm64-bin.tar.gz)\n* Email [Linux amd64](https://cdn.teleport.dev/teleport-access-email-v17.7.16-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-email-v17.7.16-linux-arm64-bin.tar.gz)\n* Microsoft Teams [Linux amd64](https://cdn.teleport.dev/teleport-access-msteams-v17.7.16-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-msteams-v17.7.16-linux-arm64-bin.tar.gz)\n"},{"url":"https://api.github.com/repos/gravitational/teleport/releases/281286881","assets_url":"https://api.github.com/repos/gravitational/teleport/releases/281286881/assets","upload_url":"https://uploads.github.com/repos/gravitational/teleport/releases/281286881/assets{?name,label}","html_url":"https://github.com/gravitational/teleport/releases/tag/v18.6.5","id":281286881,"author":{"login":"fheinecke","id":23390735,"node_id":"MDQ6VXNlcjIzMzkwNzM1","avatar_url":"https://avatars.githubusercontent.com/u/23390735?v=4","gravatar_id":"","url":"https://api.github.com/users/fheinecke","html_url":"https://github.com/fheinecke","followers_url":"https://api.github.com/users/fheinecke/followers","following_url":"https://api.github.com/users/fheinecke/following{/other_user}","gists_url":"https://api.github.com/users/fheinecke/gists{/gist_id}","starred_url":"https://api.github.com/users/fheinecke/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/fheinecke/subscriptions","organizations_url":"https://api.github.com/users/fheinecke/orgs","repos_url":"https://api.github.com/users/fheinecke/repos","events_url":"https://api.github.com/users/fheinecke/events{/privacy}","received_events_url":"https://api.github.com/users/fheinecke/received_events","type":"User","user_view_type":"public","site_admin":false},"node_id":"RE_kwDOAeGNGc4QxBjh","tag_name":"v18.6.5","target_commitish":"master","name":"Teleport 18.6.5","draft":false,"immutable":false,"prerelease":false,"created_at":"2026-01-29T18:30:32Z","updated_at":"2026-01-29T21:14:35Z","published_at":"2026-01-29T21:14:35Z","assets":[],"tarball_url":"https://api.github.com/repos/gravitational/teleport/tarball/v18.6.5","zipball_url":"https://api.github.com/repos/gravitational/teleport/zipball/v18.6.5","body":"## Description\r\n\r\n* Fixed a `CredentialContainer` error when attempting to log in to the Web UI with a hardware key using Firefox >=147.0.2. [#63245](https://github.com/gravitational/teleport/pull/63245)\r\n* Added support for deleting cluster alerts via `tctl alerts rm <alertID>` command. [#63211](https://github.com/gravitational/teleport/pull/63211)\r\n* Updated OpenSSL to 3.0.19. [#63202](https://github.com/gravitational/teleport/pull/63202)\r\n* Added support for injecting Teleport-issued ID tokens into outgoing MCP requests, enabling integrations with MCP servers such as the AWS Bedrock AgentCore MCP Gateway that can validate tokens via OIDC discovery URL. [#63156](https://github.com/gravitational/teleport/pull/63156)\r\n* Export \"additional_trusted_keys\" when exporting TLS CAs, which includes new certificates generated in the \"init\" rotation phase. Reflected in \"tctl auth export\" and the \"/webapi/auth/export\" endpoint. [#63134](https://github.com/gravitational/teleport/pull/63134)\r\n* Updated indirect dependency go-chi/chi/v5 (addresses GO-2026-4316). [#63092](https://github.com/gravitational/teleport/pull/63092)\r\n* The `tbot systemd install` command now supports a `--pid-file` flag for setting the path to the PID file. [#63039](https://github.com/gravitational/teleport/pull/63039)\r\n* Allow kubeconfig and context to be explicitly configured for `tbot` `kubernetes_secret` destination. [#63037](https://github.com/gravitational/teleport/pull/63037)\r\n* Implemented \"tctl get cert_authority/catype\", in addition to the already existing \"tctl get cert_authority\" and \"tctl get cert_authority/catype/domain\". [#63027](https://github.com/gravitational/teleport/pull/63027)\r\n* Added a Terraform module to configure Teleport and AWS for EC2 discovery in an AWS account. [#63004](https://github.com/gravitational/teleport/pull/63004)\r\n* Added opt-in support to bootstrap the `teleport-plugin-event-handler` helm chart with MWI to auto-join Teleport clusters when Operator is enabled. [#63001](https://github.com/gravitational/teleport/pull/63001)\r\n* Added permissions to the `editor` role allowing users to view autoupdate agent reports. [#62973](https://github.com/gravitational/teleport/pull/62973)\r\n* Improved performance of large search queries for DynamoDB event backend. [#62890](https://github.com/gravitational/teleport/pull/62890)\r\n* Introduced tbot-spiffe-daemon-set helm chart for deploying a Daemon Set of tbot agents which serve SPIFFE SVIDs to Kubernetes pods via the SPIFFE Workload API. [#62583](https://github.com/gravitational/teleport/pull/62583)\r\n\r\nEnterprise:\r\n* Fixed an issue with the legacy Azure OIDC IdP SSO `issuer=sts.windows.net` where Teleport was unable to map Teleport roles from the groups claim available in the `id_token`.\r\n* Added updated resources to SCIM audit events that create or change SCIM resources.\r\n* Support multi-arch lock file population for the terraform provider.\r\n* Added audit events to SCIM PATCH operations.\r\n* Updated Entra ID plugin to support importing Entra ID group owners as Access List owners.\r\n* Replaced enterprise downloads list view in Web UI with links to Public Downloads page.\r\n\r\n## Download\r\nDownload the current and previous releases of Teleport at https://goteleport.com/download.\r\n\r\n## Plugins\r\n\r\nDownload the current release of Teleport plugins from the links below.\r\n* Slack [Linux amd64](https://cdn.teleport.dev/teleport-access-slack-v18.6.5-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-slack-v18.6.5-linux-arm64-bin.tar.gz) \r\n* Mattermost [Linux amd64](https://cdn.teleport.dev/teleport-access-mattermost-v18.6.5-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-mattermost-v18.6.5-linux-arm64-bin.tar.gz)\r\n* Discord [Linux amd64](https://cdn.teleport.dev/teleport-access-discord-v18.6.5-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-discord-v18.6.5-linux-arm64-bin.tar.gz)\r\n* Terraform Provider [Linux amd64](https://cdn.teleport.dev/terraform-provider-teleport-v18.6.5-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/terraform-provider-teleport-v18.6.5-linux-arm64-bin.tar.gz) | [macOS amd64](https://cdn.teleport.dev/terraform-provider-teleport-v18.6.5-darwin-amd64-bin.tar.gz) | [macOS arm64](https://cdn.teleport.dev/terraform-provider-teleport-v18.6.5-darwin-arm64-bin.tar.gz) | [macOS universal](https://cdn.teleport.dev/terraform-provider-teleport-v18.6.5-darwin-universal-bin.tar.gz)\r\n* Event Handler [Linux amd64](https://cdn.teleport.dev/teleport-event-handler-v18.6.5-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-event-handler-v18.6.5-linux-arm64-bin.tar.gz) | [macOS amd64](https://cdn.teleport.dev/teleport-event-handler-v18.6.5-darwin-amd64-bin.tar.gz)\r\n* PagerDuty [Linux amd64](https://cdn.teleport.dev/teleport-access-pagerduty-v18.6.5-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-pagerduty-v18.6.5-linux-arm64-bin.tar.gz)\r\n* Jira [Linux amd64](https://cdn.teleport.dev/teleport-access-jira-v18.6.5-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-jira-v18.6.5-linux-arm64-bin.tar.gz)\r\n* Email [Linux amd64](https://cdn.teleport.dev/teleport-access-email-v18.6.5-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-email-v18.6.5-linux-arm64-bin.tar.gz)\r\n* Microsoft Teams [Linux amd64](https://cdn.teleport.dev/teleport-access-msteams-v18.6.5-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-msteams-v18.6.5-linux-arm64-bin.tar.gz)"},{"url":"https://api.github.com/repos/gravitational/teleport/releases/280435419","assets_url":"https://api.github.com/repos/gravitational/teleport/releases/280435419/assets","upload_url":"https://uploads.github.com/repos/gravitational/teleport/releases/280435419/assets{?name,label}","html_url":"https://github.com/gravitational/teleport/releases/tag/v17.7.15","id":280435419,"author":{"login":"fheinecke","id":23390735,"node_id":"MDQ6VXNlcjIzMzkwNzM1","avatar_url":"https://avatars.githubusercontent.com/u/23390735?v=4","gravatar_id":"","url":"https://api.github.com/users/fheinecke","html_url":"https://github.com/fheinecke","followers_url":"https://api.github.com/users/fheinecke/followers","following_url":"https://api.github.com/users/fheinecke/following{/other_user}","gists_url":"https://api.github.com/users/fheinecke/gists{/gist_id}","starred_url":"https://api.github.com/users/fheinecke/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/fheinecke/subscriptions","organizations_url":"https://api.github.com/users/fheinecke/orgs","repos_url":"https://api.github.com/users/fheinecke/repos","events_url":"https://api.github.com/users/fheinecke/events{/privacy}","received_events_url":"https://api.github.com/users/fheinecke/received_events","type":"User","user_view_type":"public","site_admin":false},"node_id":"RE_kwDOAeGNGc4Qtxrb","tag_name":"v17.7.15","target_commitish":"master","name":"Teleport 17.7.15","draft":false,"immutable":false,"prerelease":false,"created_at":"2026-01-27T13:35:57Z","updated_at":"2026-01-27T19:29:53Z","published_at":"2026-01-27T19:29:53Z","assets":[],"tarball_url":"https://api.github.com/repos/gravitational/teleport/tarball/v17.7.15","zipball_url":"https://api.github.com/repos/gravitational/teleport/zipball/v17.7.15","body":"## Description\r\n\r\n* Updated indirect dependency go-chi/chi/v5 (addresses GO-2026-4316). [#63093](https://github.com/gravitational/teleport/pull/63093)\r\n* The `tbot systemd install` command now supports a `--pid-file` flag for setting the path to the PID file. [#63038](https://github.com/gravitational/teleport/pull/63038)\r\n* Fixed GCS session recording backend not respecting rate limits. [#62987](https://github.com/gravitational/teleport/pull/62987)\r\n* Made the teleport-cluster Helm chart job resources configurable again via the `jobResources` value. [#62924](https://github.com/gravitational/teleport/pull/62924)\r\n* Reverted a disruptive change from v17.7.11: `teleport-cluster` Helm chart uses `resources` for Jobs again. If set `jobResources` takes precedence. This will change in v18, only `jobResources` will be used. [#62924](https://github.com/gravitational/teleport/pull/62924)\r\n\r\n\r\n\r\n## Download\r\nDownload the current and previous releases of Teleport at https://goteleport.com/download.\r\n\r\n## Plugins\r\n\r\nDownload the current release of Teleport plugins from the links below.\r\n* Slack [Linux amd64](https://cdn.teleport.dev/teleport-access-slack-v17.7.15-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-slack-v17.7.15-linux-arm64-bin.tar.gz) \r\n* Mattermost [Linux amd64](https://cdn.teleport.dev/teleport-access-mattermost-v17.7.15-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-mattermost-v17.7.15-linux-arm64-bin.tar.gz)\r\n* Discord [Linux amd64](https://cdn.teleport.dev/teleport-access-discord-v17.7.15-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-discord-v17.7.15-linux-arm64-bin.tar.gz)\r\n* Terraform Provider [Linux amd64](https://cdn.teleport.dev/terraform-provider-teleport-v17.7.15-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/terraform-provider-teleport-v17.7.15-linux-arm64-bin.tar.gz) | [macOS amd64](https://cdn.teleport.dev/terraform-provider-teleport-v17.7.15-darwin-amd64-bin.tar.gz) | [macOS arm64](https://cdn.teleport.dev/terraform-provider-teleport-v17.7.15-darwin-arm64-bin.tar.gz) | [macOS universal](https://cdn.teleport.dev/terraform-provider-teleport-v17.7.15-darwin-universal-bin.tar.gz)\r\n* Event Handler [Linux amd64](https://cdn.teleport.dev/teleport-event-handler-v17.7.15-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-event-handler-v17.7.15-linux-arm64-bin.tar.gz) | [macOS amd64](https://cdn.teleport.dev/teleport-event-handler-v17.7.15-darwin-amd64-bin.tar.gz)\r\n* PagerDuty [Linux amd64](https://cdn.teleport.dev/teleport-access-pagerduty-v17.7.15-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-pagerduty-v17.7.15-linux-arm64-bin.tar.gz)\r\n* Jira [Linux amd64](https://cdn.teleport.dev/teleport-access-jira-v17.7.15-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-jira-v17.7.15-linux-arm64-bin.tar.gz)\r\n* Email [Linux amd64](https://cdn.teleport.dev/teleport-access-email-v17.7.15-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-email-v17.7.15-linux-arm64-bin.tar.gz)\r\n* Microsoft Teams [Linux amd64](https://cdn.teleport.dev/teleport-access-msteams-v17.7.15-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-msteams-v17.7.15-linux-arm64-bin.tar.gz)"},{"url":"https://api.github.com/repos/gravitational/teleport/releases/278685050","assets_url":"https://api.github.com/repos/gravitational/teleport/releases/278685050/assets","upload_url":"https://uploads.github.com/repos/gravitational/teleport/releases/278685050/assets{?name,label}","html_url":"https://github.com/gravitational/teleport/releases/tag/v18.6.4","id":278685050,"author":{"login":"aadc-dev","id":215184129,"node_id":"U_kgDODNNzAQ","avatar_url":"https://avatars.githubusercontent.com/u/215184129?v=4","gravatar_id":"","url":"https://api.github.com/users/aadc-dev","html_url":"https://github.com/aadc-dev","followers_url":"https://api.github.com/users/aadc-dev/followers","following_url":"https://api.github.com/users/aadc-dev/following{/other_user}","gists_url":"https://api.github.com/users/aadc-dev/gists{/gist_id}","starred_url":"https://api.github.com/users/aadc-dev/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/aadc-dev/subscriptions","organizations_url":"https://api.github.com/users/aadc-dev/orgs","repos_url":"https://api.github.com/users/aadc-dev/repos","events_url":"https://api.github.com/users/aadc-dev/events{/privacy}","received_events_url":"https://api.github.com/users/aadc-dev/received_events","type":"User","user_view_type":"public","site_admin":false},"node_id":"RE_kwDOAeGNGc4QnGV6","tag_name":"v18.6.4","target_commitish":"master","name":"Teleport 18.6.4","draft":false,"immutable":false,"prerelease":false,"created_at":"2026-01-21T00:40:24Z","updated_at":"2026-01-21T15:49:31Z","published_at":"2026-01-21T15:49:31Z","assets":[],"tarball_url":"https://api.github.com/repos/gravitational/teleport/tarball/v18.6.4","zipball_url":"https://api.github.com/repos/gravitational/teleport/zipball/v18.6.4","body":"## Description\n\n* Fixed GCS session recording backend not respecting rate limits. [#62986](https://github.com/gravitational/teleport/pull/62986)\n* Fixed a bug where members of a former owner Access List retain the owner permissions grants of the former owned Access List. It also fixes the issue with not being able to delete a former owner Access List. Please note: this could only happen if the owner Access List ownership was removed via the web UI. [#62979](https://github.com/gravitational/teleport/pull/62979)\n* Tctl commands executed from Teleport Connect now target the current root cluster with the `TELEPORT_AUTH_SERVER` env var, similar to how it works for tsh; this behavior can be turned off in the config file. [#62923](https://github.com/gravitational/teleport/pull/62923)\n* Made the `teleport-cluster` Helm chart job resources configurable again via the `jobResources` value. [#62922](https://github.com/gravitational/teleport/pull/62922)\n* Updated Go to 1.24.12. [#62885](https://github.com/gravitational/teleport/pull/62885)\n* Fixed launching AWS Identity Center from Teleport Connect. [#62840](https://github.com/gravitational/teleport/pull/62840)\n* Removed erroneous `pair-wise` subject type from Teleport&#39;s OpenID configuration. [#62835](https://github.com/gravitational/teleport/pull/62835)\n* Fixed renewed X509-SVIDs not being proactively sent to Envoy instances. [#62830](https://github.com/gravitational/teleport/pull/62830)\n* Fix an issue `MCP Session Listen` events may spam audit log with app service error `malformed line in SSE stream: &#34;&#34;`. [#62811](https://github.com/gravitational/teleport/pull/62811)\n* Added automatic client certificate reloading option for postgres backends. [#62747](https://github.com/gravitational/teleport/pull/62747)\n* Fixed an issue that would prevent tsh from working when the 1password SSH agent is running. [#62736](https://github.com/gravitational/teleport/pull/62736)\n* Add `tbot wait` API and helper to let scripts wait for bots to become ready. [#62719](https://github.com/gravitational/teleport/pull/62719)\n* MWI: Add support for templating secret annotations in the tbot&#39;s `kubernetes/argo-cd` service. [#62709](https://github.com/gravitational/teleport/pull/62709)\n* Add `quicksight.aws.amazon.com` as valid URL for AWS Console access. [#62700](https://github.com/gravitational/teleport/pull/62700)\n* Fixed potential delay in updating User Task status for Discovery resources. [#62699](https://github.com/gravitational/teleport/pull/62699)\n* Fixed an issue where logging in to the Web UI with Device Trust would lose query params of the redirect URL. [#62677](https://github.com/gravitational/teleport/pull/62677)\n* Fixed an issue where Teleport Connect could generate a flurry of notifications about not being able to connect to a resource. [#62671](https://github.com/gravitational/teleport/pull/62671)\n* Fixed issuance of wildcard DNS SANs with Workload Identity. [#62667](https://github.com/gravitational/teleport/pull/62667)\n* Fixed a memory leak in access list reminder notifications affecting clusters with more than 1000 pending Access List reviews. [#62663](https://github.com/gravitational/teleport/pull/62663)\n* Added support for health checks to monitor cert authority availability and affect Teleport Auth readiness. [#62637](https://github.com/gravitational/teleport/pull/62637)\n* Added IAM joining support from new AWS regions in asia. [#62627](https://github.com/gravitational/teleport/pull/62627)\n* Added VNet config Create/Update/Delete audit events. [#62618](https://github.com/gravitational/teleport/pull/62618)\n* Added cleanup of access entries for EKS auto-discovered clusters when they no longer match the filtering criteria and are removed. [#62598](https://github.com/gravitational/teleport/pull/62598)\n* Added `teleport debug metrics` command. [#62586](https://github.com/gravitational/teleport/pull/62586)\n* Fixed missing initialization of Azure IMDS clients, which could cause operational failures in some Teleport configurations deployed to Azure, in particular when accessing Azure SQL Server. [#62579](https://github.com/gravitational/teleport/pull/62579)\n* Fixed some auto update audit events showing up as unknown in the web UI. [#62547](https://github.com/gravitational/teleport/pull/62547)\n* The join tokens UI now indicates which tokens are managed by the Teleport Cloud platform. [#62544](https://github.com/gravitational/teleport/pull/62544)\n* The tctl tokens add command now includes the CA pins in JSON and YAML output. [#62536](https://github.com/gravitational/teleport/pull/62536)\n* Added `teleport debug readyz` command. [#62532](https://github.com/gravitational/teleport/pull/62532)\n* Audit log and session uploader now respect region field of external_audit_storage resource when present. [#62520](https://github.com/gravitational/teleport/pull/62520)\n* Added default routes to the web UI left nav top-level category buttons. [#62502](https://github.com/gravitational/teleport/pull/62502)\n* Fixed an issue that prevented searching for users by role in the web UI. [#62474](https://github.com/gravitational/teleport/pull/62474)\n* Fixed tilde expansion for moderated SFTP. [#62453](https://github.com/gravitational/teleport/pull/62453)\n* Added support for standard TLS secret key names for helm charts: `teleport-plugin-event-handler`, `teleport-cluster`, `teleport-operator`, `teleport-kube-agent`. [#62451](https://github.com/gravitational/teleport/pull/62451)\n* Added a plan modifier to recompute kubernetes_resources defaults during role version upgrades, fixing Terraform role upgrade issues. [#62417](https://github.com/gravitational/teleport/pull/62417)\n* Fix an issue in the Teleport SSH Service where interactive PAM Auth modules always fail when trying to run exec sessions with tty allocated. e.g. `tsh ssh --tty &lt;node&gt; ls`. [#62064](https://github.com/gravitational/teleport/pull/62064)\n\nEnterprise:\n* Fixed an issue in the Entra ID integration where a user account with an unsupported username character `/` could prevent other valid users and groups to be synced to Teleport. Such user accounts are now filtered.\n* Cockroachdb: add automatic client certificate reloading option.\n* Enabled UI editing of Access List descriptions.\n* Added protections against replay attacks when IdP-initiated SAML is enabled.\n* Added Access Automations Terraform dialog.\n\n## Download\n\nDownload the current and previous releases of Teleport at https://goteleport.com/download.\n\n## Plugins\n\nDownload the current release of Teleport plugins from the links below.\n* Slack [Linux amd64](https://cdn.teleport.dev/teleport-access-slack-v18.6.4-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-slack-v18.6.4-linux-arm64-bin.tar.gz) \n* Mattermost [Linux amd64](https://cdn.teleport.dev/teleport-access-mattermost-v18.6.4-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-mattermost-v18.6.4-linux-arm64-bin.tar.gz)\n* Discord [Linux amd64](https://cdn.teleport.dev/teleport-access-discord-v18.6.4-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-discord-v18.6.4-linux-arm64-bin.tar.gz)\n* Terraform Provider [Linux amd64](https://cdn.teleport.dev/terraform-provider-teleport-v18.6.4-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/terraform-provider-teleport-v18.6.4-linux-arm64-bin.tar.gz) | [macOS amd64](https://cdn.teleport.dev/terraform-provider-teleport-v18.6.4-darwin-amd64-bin.tar.gz) | [macOS arm64](https://cdn.teleport.dev/terraform-provider-teleport-v18.6.4-darwin-arm64-bin.tar.gz) | [macOS universal](https://cdn.teleport.dev/terraform-provider-teleport-v18.6.4-darwin-universal-bin.tar.gz)\n* Event Handler [Linux amd64](https://cdn.teleport.dev/teleport-event-handler-v18.6.4-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-event-handler-v18.6.4-linux-arm64-bin.tar.gz) | [macOS amd64](https://cdn.teleport.dev/teleport-event-handler-v18.6.4-darwin-amd64-bin.tar.gz)\n* PagerDuty [Linux amd64](https://cdn.teleport.dev/teleport-access-pagerduty-v18.6.4-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-pagerduty-v18.6.4-linux-arm64-bin.tar.gz)\n* Jira [Linux amd64](https://cdn.teleport.dev/teleport-access-jira-v18.6.4-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-jira-v18.6.4-linux-arm64-bin.tar.gz)\n* Email [Linux amd64](https://cdn.teleport.dev/teleport-access-email-v18.6.4-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-email-v18.6.4-linux-arm64-bin.tar.gz)\n* Microsoft Teams [Linux amd64](https://cdn.teleport.dev/teleport-access-msteams-v18.6.4-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-msteams-v18.6.4-linux-arm64-bin.tar.gz)\n","reactions":{"url":"https://api.github.com/repos/gravitational/teleport/releases/278685050/reactions","total_count":1,"+1":0,"-1":0,"laugh":0,"hooray":1,"confused":0,"heart":0,"rocket":0,"eyes":0}}]