Infrastructure agent release notesRSS

Notes

Security notices

• chore(deps): update dependency newrelic/nri-flex to v1.18.16 fixes CVE-2026-111943 in #2373
• Update Go version to 1.27.3 fixes CVE-2026-111943 in #2372
• Update github.com/klauspost/compress to 1.18.7 fixes CVE-2026-63209 in #2372
• chore(deps): update dependency newrelic/nri-winservices to v1.5.7 fixes CVE-2026-111943 in #2374
• chore(deps): update dependency newrelic/nrjmx to fixes CVE-2026-64607 v2.15.1 in #2370
• Update nri-prometheus, nri-docker versions in fixes CVE-2026-111943 #2375

Support statement:

A new version of the agent has been released. Follow standard procedures to update the Infrastructure agent.

We recommend updating to the latest agent version as soon as it's available. If you can't upgrade to the latest version, update your agents to a version no more than 90 days old. Read more about keeping agents up to date.

See the New Relic Infrastructure agent EOL policy for information about agent releases and support dates.

Notes

Security notices

• chore(deps): bump golang.org/x/net to v0.60.0, fixing CVE-2026-78669 (HIGH) - net/http2 denial of service via excessive SETTINGS frames in #2364

Bug fixes

• fix: Prevent the agent from crashing if clean temp folder fails and fall back to manual delete on ERROR_INVALID_FUNCTION / STATUS_NOT_IMPLEMENTED in #2354
• fix: hide safe dir check behind a config in #2357
• Fix: Update core integrations in #2359
• revert #2306 in #2362

Other changes

• chore(deps): bump github.com/containerd/containerd from 1.7.35 to 1.7.36 in #2353
• Optimize the if else condition in #2360
• chore(deps): bump github.com/moby/sys/user from 0.3.0 to 0.4.1 in #2363
• chore: bump embedded OHI versions (nri-docker, nri-flex, nri-winservices, nri-prometheus) in #2365

Support statement:

A new version of the agent has been released. Follow standard procedures to update the Infrastructure agent.

We recommend updating to the latest agent version as soon as it's available. If you can't upgrade to the latest version, update your agents to a version no more than 90 days old. Read more about keeping agents up to date.

See the New Relic Infrastructure agent EOL policy for information about agent releases and support dates.

Notes

🛡️ Security notices

• Bump dependency newrelic/nrjmx to v2.15.0 in #2346
• Bump crypto to v0.57.0 in #2344
• Bump embedded OHI integration versions in #2352

🐞 Bug fixes

• Fixed privilege escalation bug that allowed sandboxed integrations to spawn root children in #2338

Support statement:

A new version of the agent has been released. Follow standard procedures to update the Infrastructure agent.

We recommend updating to the latest agent version as soon as it's available. If you can't upgrade to the latest version, update your agents to a version no more than 90 days old. Read more about keeping agents up to date.

See the New Relic Infrastructure agent EOL policy for information about agent releases and support dates.

Notes

🛡️ Security notices

• Bump dependency newrelic/nrjmx to v2.14.0 in #2336 to address CVE-2026-54399 and CVE-2026-54428
• Bump dependency newrelic/nri-prometheus to v2.30.4 in #2335
• Bump google.golang.org/grpc from 1.83.1 to 1.83.2 in #2342 to address CVE-2026-84445
• Bump containerd to v1.7.35 in #2340 to address CVE-2026-53495
• Bump dependency newrelic/nri-flex to v1.18.13 in #2343 to address CVE-2026-56855 and CVE-2026-78662

🐞 Bug fixes

• replace deprecated MemoryLimit with MemoryMax for systemd >=231 in #2337
• add groupfs check for tmp file ownership in #2345

Support statement:

A new version of the agent has been released. Follow standard procedures to update the Infrastructure agent.

We recommend updating to the latest agent version as soon as it's available. If you can't upgrade to the latest version, update your agents to a version no more than 90 days old. Read more about keeping agents up to date.

See the New Relic Infrastructure agent EOL policy for information about agent releases and support dates.

Notes

🛡️ Security updates

• Updated google.golang.org/grpc to 1.83.1 to resolve security vulnerability CVE-2026-84304 in #2328

🐞 Bug fixes

• Allowed mount path validation during safe directory checks #2325

Support statement:

A new version of the agent has been released. Follow standard procedures to update the Infrastructure agent.

We recommend updating to the latest agent version as soon as it's available. If you can't upgrade to the latest version, update your agents to a version no more than 90 days old. Read more about keeping agents up to date.

See the New Relic Infrastructure agent EOL policy for information about agent releases and support dates.

Notes

🛡️ Security notices

• Updated flex to version v1.18.12 to resolve security vulnerability CVE-2026-56854 in #2323

Support statement:

A new version of the agent has been released. Follow standard procedures to update the Infrastructure agent.

We recommend updating to the latest agent version as soon as it's available. If you can't upgrade to the latest version, update your agents to a version no more than 90 days old. Read more about keeping agents up to date.

See the New Relic Infrastructure agent EOL policy for information about agent releases and support dates.

Notes

🛡️ Security notices

• Bumped http://golang.org/x/crypto to v0.55.0 fix security CVE-2026-56854 in #2321

🐞 Bug fixes

• Extended the WMI fallback to retrieve Queue Length in #2312
• Retry Start-Service on SCM races and validate license key before starting in #2307

Support statement:

A new version of the agent has been released. Follow standard procedures to update the Infrastructure agent.

We recommend updating to the latest agent version as soon as it's available. If you can't upgrade to the latest version, update your agents to a version no more than 90 days old. Read more about keeping agents up to date.

See the New Relic Infrastructure agent EOL policy for information about agent releases and support dates.

A new version of the agent has been released. Follow standard procedures to update the Infrastructure agent. New Relic recommends that you upgrade the agent regularly and at a minimum every 3 months. As of this release, the oldest supported version is Infrastructure agent 1.65.3.

Changed

• Added Azure Key Vault as another databind secret source. #2304
• Fixed a local privilege escalation vulnerability caused by predictable Fluent Bit config directory reuse. #2306
• Bumped Go to 1.26.6 to fix multiple Go stdlib CVEs. #2308
• Updated embedded OHI versions (nri-docker, nri-flex, nri-winservices, nri-prometheus) to fix CVEs. #2316

Notes

🛡️ Security notices

• Fixed a remote code execution vulnerability caused by path traversal in #2292
• Added explicit permissions to GitHub Actions workflows to reduce token scope in #2232
• Bumped google.golang.org/grpc from 1.79.3 to 1.82.1 in go.mod in #2296
• Bumped embedded OHI versions (nri-docker, nri-flex) to fix known CVEs in #2302
• bump vulnerable dependencies flagged by Trivy scan in #2301

🚀 Enhancements

• Added support for ignoring default integration locations via disable_plugin_default_dir_scan in #2290
• Made environment variables used by Agent Control public in #2293
• Added OCI tag support to match AWS tags (Phase 1 + Phase 2) in #2295
• Enabled NRIA_DISABLE_PLUGIN_DEFAULT_DIR_SCAN by default for Agent-Control-managed agents in #2300
• Removed nri-flex from agent-control artifacts in #2291

🐞 Bug fixes

• Restored missing job permissions for release and canary workflows in #2303

Support statement:

A new version of the agent has been released. Follow standard procedures to update the Infrastructure agent.

We recommend updating to the latest agent version as soon as it's available. If you can't upgrade to the latest version, update your agents to a version no more than 90 days old. Read more about keeping agents up to date.

See the New Relic Infrastructure agent EOL policy for information about agent releases and support dates.