Skip to Content
Release Notes11.6.0 ~ 11.6.10

11.6.0 ~ 11.6.10

QueryPie 11.6.10 Release

November 03, 2026

Improvement

  • [Common] Addressed Java runtime security vulnerability (CVE-2026-114820)
    • CVE-2026-114820
      • A compromised root CA certificate included in the Java runtime trust store could undermine certificate validation trust in TLS communications that rely on that root CA
      • Action: Upgrade to Corretto 17.0.21.0.11 or later and remove the affected root CA from the trust store (cacerts)


QueryPie 11.6.9 Release

October 29, 2026

Improvement

  • [Common] Addressed Apache Tomcat and Java runtime security vulnerabilities
    • CVE-2026-101356
      • Requests and responses could be mixed up during HTTP/2 asynchronous processing
      • Action: Upgrade to Tomcat Embed 10.1.61 or later
    • CVE-2026-101296
      • Incorrect passwords could be accepted in non-GSSAPI SASL authentication for JNDIRealm
      • Action: Upgrade to Tomcat Embed 10.1.61 or later
    • CVE-2026-93446
      • TLS 1.3 connections could intermittently fail
      • Action: Upgrade to Tomcat Embed 10.1.61 or later
    • CVE-2026-88041
      • Trailer information from a previous HTTP/2 request could leak into the next request
      • Action: Upgrade to Tomcat Embed 10.1.61 or later
    • CVE-2026-74049
      • Page processing could continue after a JSTL c:redirect instead of stopping
      • Action: Upgrade to Tomcat Embed 10.1.61 or later
    • CVE-2026-74048
      • The system could keep running in non-FIPS mode when FIPS activation fails
      • Action: Upgrade to Tomcat Embed 10.1.61 or later
    • CVE-2026-91403
      • Forged TLS certificate chains could be trusted due to the eMudhra intermediate CA private key leak
      • Action: Upgrade to Corretto 17.0.21.0.10 or later and apply the Engine bundled JRE measures


QueryPie 11.6.8 Release

October 27, 2026

Improvement

  • [Common] Fixed an issue where the Agent logged out because HTTP cookies were not synchronized after token refresh when creating new DB or SSH connections in Multi Agent


QueryPie 11.6.7 Release

October 23, 2026

New Feature

  • [Common] Added the ability to diagnose QueryPie connection status in Multi Agent and save the results as a report
  • [Common] Added support for selecting the DB connection mode of Multi Agent and connecting to DAC connections through a shared SOCKS server
  • [Common] Added support for SOCKS Proxy (9001) and large-capacity TCP Relay for agentless connections
  • [Common] Added support for running a connection test (Dry Run) with the changed content before saving Cloud Provider Credentials
  • [Common] Added support for dynamic substitution of the VPC Network Name in GCP Cloud Provider Default Tags
  • [DAC] Applied Scan Guard, Timeout, and Pagination Guard to DynamoDB PartiQL execution
  • [DAC] Extended blocking of UPDATE and DELETE without a WHERE clause (WHERE Guard) to the Proxy path and additional RDB vendors
  • [DAC] Added target object identification information (objectType, objectUuid) to External API v2 Agentless Proxy responses
  • [DAC] Added a Save API after MongoDB SRV Lookup to External API v3
  • [DAC] Removed the requirement for the database parameter when connecting to ShardingSphere
  • [DAC] Automatically reclaim unused Proxy Ports of deleted Connections
  • [DAC] Added support for querying audit logs across the full scope (ALL) in DAC Audit Roles
  • [SAC] Added support for bulk updating server SSH Ports through External API v2
  • [SAC] Added support for specifying the audit scope by Server Group in Audit Roles
  • [KAC] Added support for bulk adding and updating Cluster Custom Tags through External API v2
  • [KAC] Improved the KAC Web Client resource browser with a tree structure and added per-resource columns plus Shell and Log execution within the list

Improvement

  • [Common] Fixed an issue where exporting more than 2,000 Workflows from Audit Export failed immediately due to cursor length overflow
  • [Common] Fixed an issue where infinite loading occurred on the first page entry after login
  • [Common] Reverted the policy that overwrote SAC default tags during the initial synchronization
  • [Common] Improved the selection UX in large connection environments by providing a Picker with search and pagination on the connection selection screen
  • [Common] Improved the Multi Agent connection guide to display the actual local port in use and the SOCKS/TCP connection mode
  • [Common] Fixed a privilege escalation vulnerability where a user with only administrator role view permission could set administrator privileges
  • [DAC] Disabled the Custom JDBC Driver upload and usage feature by default to address a server-side code execution vulnerability
  • [DAC] Fixed an issue where executing an Oracle EDITIONABLE trigger split the SQL and created an INVALID trigger
  • [DAC] Fixed an issue where PostgreSQL connections through the Agent were considered invalid with pgjdbc 42.7.7 or later
  • [DAC] Improved DB Access History to record client and upstream termination reasons separately when a Proxy connection ends
  • [DAC] Fixed an issue where negative scale values of SAP HANA DECIMAL columns were displayed incorrectly
  • [DAC] Fixed an issue where the year in DAC Audit Reports was displayed incorrectly
  • [DAC] Fixed an issue where Unmasking exceptions were not applied on the new policy Proxy path for MongoDB
  • [DAC] Fixed an issue where sorting and pagination did not work in the Query Rules list
  • [DAC] Improved permission check latency and API CPU usage when executing queries in environments with many connections and permissions
  • [DAC] Improved DB Access Requests to be finally approved with the initial approval scope by removing partial approval
  • [DAC] Fixed an issue where DB Access Requests (Schema Level) were not submitted immediately after Resubmit
  • [DAC] Fixed an issue where the Connection name disappeared after creating a DB Connection
  • [DAC] Improved custom names of Cloud DB Connections to be preserved after synchronization
  • [DAC] Improved lookup performance in large connection environments by applying server-side pagination and server-side search to the DB Connection, Access Control, and DB Access Request lists
  • [DAC] Fixed an issue where column sorting did not work in the DB Connection list table
  • [DAC] Fixed an issue where new Policy change history was not recorded in Activity Log in Configuration
  • [DAC] Improved Alert Provider selector lookup permissions to be separated so that permission errors do not occur
  • [DAC] Fixed an issue where an error occurred when saving after converting GCP Credentials to Vault
  • [DAC] Fixed an issue where an error occurred when selecting a DB Connection in SQL Request
  • [DAC] Improved the Connection selection items in SQL Request to display whether Ledger is applied
  • [DAC] Fixed an issue where Max Display and Export Rows were saved as -1 when only the Secret Store was updated
  • [DAC] Fixed an issue where deleted Privilege Types were displayed incorrectly in Access Request Workflow details
  • [DAC] Improved the stability of bulk Redis command execution and Streaming RPC token refresh
  • [DAC] Improved the Proxy Management list to be displayed even in large connection environments by applying pagination
  • [SAC] Fixed an issue where RDP connections with Windows/MSTSC failed in reverse tunnel environments
  • [SAC] Fixed an issue where a 400 error occurred when calling the SAC CloudProvider Sync API
  • [SAC] Fixed an issue where a QPS-2082 error occurred when modifying a Scheduled Cross Account Role CloudProvider
  • [SAC] Fixed an issue where the DAC policy list was exposed on the AWS Cloud Provider detail screen
  • [SAC] Improved Script.sh creation to fall back to an alternative method when it fails in the connection account HOME path
  • [SAC] Fixed an issue where lookups failed when logs with the same timestamp fell on a page boundary in Command Audit
  • [SAC] Restricted the permissions of the Windows Server Agent installer in the AIO image to 644
  • [SAC] Improved reverse tunnel session status to be logged every minute
  • [SAC] Fixed an issue where the changed audit scope was not re-queried when refreshing the Audit screen
  • [KAC] Fixed an issue where Dry Run failed for EKS clusters without an Access Entry
  • [KAC] Fixed an issue where the progress did not reach 100% when synchronizing GCP Cloud Provider Search Filters
  • [KAC] Fixed an issue where saving Request Audit failed when executing long kubectl exec commands
  • [KAC] Fixed an issue where the URL state was not synchronized when re-entering the KAC Web Client
  • [KAC] Fixed an issue where the list disappeared when navigating to the list page after opening a bottom tab in the KAC Web Client

QueryPie 11.6.6 Release

August 25, 2026

New Feature

  • [Common] Added Audit log lookup and DAC operations APIs to External API V3 (beta)
  • [Common] Added integrated audit event lookup by user in User Timeline (beta)
  • [DAC] Added IAM authentication support for ElastiCache Connections synchronized through AWS Cloud Provider
  • [SAC] Added Policy-based control over clipboard use for RDP connections
  • [SAC] Added support for configuring session recording in SAC Policy
  • [MAC] Added support for configuring Forward Proxy usage for each MCP Server
  • [MAC] Added support for users to enter QueryPie Registered Credentials directly when connecting to an MCP Server
  • [MAC] Added Policy support for requiring users to enter a reason when using an MCP Server

Improvement

  • [Common] Fixed issue where Authentication Job Change History displayed only the latest entry
  • [Common] Fixed issue where connection information for deleted DB Connections blocked Allowed Zone deletion
  • [Common] Improved connection stability by refreshing Multi Agent Access Tokens before expiration
  • [Common] Improved SAC and DAC connections through Multi Agent to work correctly in environments configured with HTTPS_PROXY
  • [Common] Improved Okta synchronization so existing users’ First Name and Last Name are also updated
  • [DAC] Fixed missing or duplicate requests in SQL Export Request Workflow results from Audit Log Export
  • [DAC] Fixed errors caused by Draft requests being included in SQL Request Workflow Audit Log Export
  • [DAC] Fixed ClickHouse DateTime and DateTime64 results varying by the QueryPie execution environment’s Timezone
  • [DAC] Fixed an engine error when viewing Object Info for a View in ClickHouse Web Editor
  • [DAC] Fixed a WITH ORDINALITY parsing error when DataGrip retrieves PostgreSQL table DDL
  • [DAC] Fixed issue where users removed from a Data Policy Exclude Group continued to be excluded from masking
  • [DAC] Improved DB Connection Accessible Users to show Renewed At, the time permissions were renewed
  • [DAC] Improved Dynamic Proxy so expected connection failures do not repeatedly log Error Stack Traces
  • [DAC] Removed an incorrect Not Implemented message from Excel Export options
  • [DAC] Strengthened External API validation to prevent Policy and Rule registration for DBs that do not support Ledger
  • [DAC] Fixed Data Masking parsing errors when MariaDB Views use the GROUP_CONCAT LIMIT clause
  • [DAC] Fixed handling errors for nested $addFields expressions in MongoDB Aggregate
  • [DAC] Improved permission checks for MongoDB createUser and updateUser commands to work consistently in Web and Proxy
  • [DAC] Improved MongoDB inserts into new Collections to also validate Create permission
  • [DAC] Improved MongoDB Aggregate outandout and merge operations to validate the permissions required to modify data
  • [DAC] Fixed comma-containing column paths not being processed correctly in MongoDB DB Policy Exception Requests
  • [DAC] Fixed ALTER statements being incorrectly treated as SQL Requests when MySQL Ledger Policy is applied
  • [DAC] Improved MySQL connection failures to display the Target DB’s actual error instead of an internal parsing error
  • [DAC] Fixed Web SQL connection failures for mysql_native_password accounts in MySQL Router environments
  • [DAC] Fixed duplicate history entries when filtering Query Audit results
  • [DAC] Fixed errors when running queries against Redshift Datashare Shared Databases
  • [DAC] Added an Import Batch Size setting to Redshift Connections to improve CSV and Excel Import performance
  • [DAC] Improved Trino Proxy so queries are processed correctly when follow-up requests are sent over a new TCP connection
  • [DAC] Expanded blocking of unconditional changes and deletions to MongoDB, DocumentDB, and DynamoDB in Web SQL Editor and MongoDB and DocumentDB in Proxy
  • [DAC] Improved performance by skipping unnecessary DML analysis when full scan warnings and unconditional query blocking are disabled
  • [DAC] Improved the Workflow Assignee dropdown so it remains open while selecting multiple assignees
  • [SAC] Fixed Azure Cloud Provider synchronization Jobs remaining in Running state when API responses are delayed
  • [KAC] Fixed AWS icons being displayed for Clusters synchronized through GCP Cloud Provider
  • [KAC] Improved validation to identify a missing Scheme in a Cluster API URL before registration
  • [KAC] Fixed a declaredFeatures parsing error when viewing Node summaries for Kubernetes 1.36.1 Clusters
  • [KAC] Fixed missing default and Wide output columns in kubectl lookups through KAC Proxy
  • [KAC] Fixed deleted users remaining in the Users / Groups list for Roles
  • [AI Chat] Improved Audit Log recording for Context Management and configuration changes
  • [AI Chat] Improved QueryPie AI Agent so it can reference the current time
  • [MAC] Improved usability for masking Policy settings in MAC Policy YAML and the Policy UI
  • [MAC] Improved compatibility for scope and token response handling across MCP OAuth Providers
  • [MAC] Improved lookup performance and selection behavior on MCP Profile list and edit screens
  • [MAC] Improved handling stability for missing data in MCP Request Audit and SIEM integrations
  • [MAC] Added a warning before Tool initialization when MCP Server connection information changes
  • [MAC] Improved stability for saving and refreshing MCP Server Tool lists and displaying the default connection guide
  • [MAC] Improved UX for user MCP Server lists, Workflow request lists, and hidden MCP Roles

QueryPie 11.6.5 Release

July 2, 2026

New Feature

  • [Common] Added display of licensed user count and users who accessed in the last 30 days within the license scope
  • [DAC] Added support for Databricks Connection, Web Editor, Agent/Agentless Proxy, policies, and audit logs
  • [DAC] Added Result Reuse option for Athena Connections
  • [DAC] Added ability to block SQL execution without WHERE clauses in SQL Editor and RDB targets
  • [DAC] Added support for collecting Label information during GCP Cloud SQL synchronization and using it as Cloud Provider filter tags
  • [DAC] Added license usage restriction by DB vendor
  • [DAC] Promoted Custom JDBC Vendor and Query Rule from beta to official features
  • [KAC] Added GCP Cloud Provider Tag-based synchronization
  • [KAC] Added YAML editing, local validation, and change Diff Review features in Web Client
  • [AI Chat] Integrated Skills management into the AI Chat workspace
  • [MAC] Added support for connecting OAuth MCP Servers that do not support DCR by using Client ID/Secret

Improvement

  • [Common] Added attachments with expiring target details to SAC/DAC permission expiration notification emails
  • [Common] Added force option support to User Profile lookup and update External APIs
  • [Common] Improved API Token Allowed Zone changes to be refreshed immediately
  • [Common] Improved Vault AppRole Namespace application error handling
  • [Common] Fixed User Not Found error when viewing Job execution history for deleted users
  • [Common] Improved Multi Agent token handling security
  • [Common] Improved client JavaScript bundle so unnecessary internal IP information is not included
  • [DAC] Improved Databricks connection stability, including Web Editor autocomplete, DataGrip connections, SSH settings, and LIMIT/OFFSET handling
  • [DAC] Fixed Databricks policy application and Agentless Agent JDBC URL handling errors
  • [DAC] Added PostgreSQL RETURNING statement support for data masking policies
  • [DAC] Improved Draft Workflow entry to show an error message when referencing a Connection without access permission
  • [DAC] Fixed intermittent JavaScript errors during DAC Audit filtering
  • [DAC] Fixed multiple query handling errors in Workflow SQL Export Requests
  • [DAC] Improved Privilege Type editing so Privilege Name can also be changed
  • [DAC] Fixed issue where an incorrect Proxy port error popup was shown when accessing MongoDB
  • [DAC] Fixed Athena CREATE PROTECTED MULTI DIALECT VIEW parsing error
  • [DAC] Improved DB Policy Exception Request Approval Permission so it is exposed in the Roles Policy list
  • [DAC] Improved Trino Proxy connections so query cancel requests are applied correctly
  • [DAC] Improved Trino / Presto Proxy parse errors so they are delivered as proper failure responses
  • [DAC] Fixed issue where workflows were incorrectly shown as failed due to parsing delay while processing MongoDB SQL Requests
  • [DAC] Fixed status display issue where failed query execution appeared successful in QueryPie Web
  • [DAC] Fixed partition key column insert error in Impala
  • [DAC] Improved Redis Cluster read/write routing stability during SQL Request processing
  • [DAC] Fixed issue where unmasked fields were displayed as null in MongoDB Aggregate queries
  • [DAC] Improved Query Rule so string conditions containing spaces are evaluated as intended
  • [SAC] Improved the Add Account screen to query only required settings without unnecessary full configuration permissions
  • [SAC] Improved Windows Server Agent remote upgrades so they are not treated as failed in slow network environments
  • [SAC] Improved TACACS authentication processing logic
  • [SAC] Improved RDP session handling so domain controller network errors during session creation do not interrupt session processing
  • [KAC] Improved GCP Cloud Provider API and scheduled synchronization to work correctly
  • [KAC] Fixed WEB ACL blocking issue by preserving the actual client IP in Kubernetes Web Client requests
  • [KAC] Improved Kubernetes Web Client internal proxy communication path to fix connection issues in NLB environments
  • [KAC] Improved Kubernetes Web Client status display, error handling, and operational UX
  • [KAC] Fixed User Not Found error when deleting Role Assignment after deleting a user
  • [AI Chat] Improved MCP tool calls so users can choose approval-based execution or automatic execution mode
  • [MAC] Changed the default Transport to Streamable HTTP when creating MCP Servers
  • [MAC] Improved MAC Policy YAML to support allow and deny policy syntax together
  • [MAC] Improved MCP Server detail behavior so OAuth connection and Tool synchronization after Endpoint URL changes use the draft endpoint
  • [MAC] Fixed save errors after MCP Server token reset
  • [MAC] Fixed client error when viewing a Policy without a Tool list
  • [MAC] Improved the Request Audit detail screen so request contents can be checked in a consistent format
  • [MAC] Improved status display for the Include Payload option when Client Request Audit is disabled
  • [MAC] Improved scrolling and guide display on the MCP Server list and user page
  • [MAC] Fixed MCP Client authentication and registration flow errors for Claude Code, Cursor, and similar clients

QueryPie 11.6.4 Release

June 23, 2026

New Feature

  • None

Improvement

  • [Common] Fixed a vulnerability where remaining SQLJob token-related code removed in 10.2.6 could be used in External API

QueryPie 11.6.3 Release

May 29, 2026

New Feature

  • [Common] Expanded support for the SCIM 2.0 standard protocol (including PATCH, externalId support, and inactive user reactivation)
  • [Common] Added External API V3 (beta) User API (supports user create/read/update/delete, activation/deactivation, password reset, profile/group/Allowed Zone management, authentication setting lookup, and IdP synchronization)
  • [DAC] Added Vault-based Secret Store integration support for GCP CloudProvider
  • [DAC] Added Secret Store integration support for BigQuery and Google Spanner Connections
  • [DAC] Added Secret Store Auth Type support when configuring DB Jumphost (SSH Tunnel)
  • [DAC] Added RTA connection support for AWS DocumentDB Cluster
  • [DAC] Added AWS Secrets Manager authentication support for Custom JDBC Vendor
  • [DAC] Added TLS and properties configuration support for Custom JDBC Vendor
  • [DAC] Added Web Editor autocomplete support for Custom JDBC Vendor
  • [SAC] Added authentication and Role switching features in CLI
  • [SAC] Added Secret Store (Vault SSH CA) Auth Type for Jumphost server authentication
  • [KAC] Added External APIs to query, create, update, and delete K8s Cloud Providers
  • [MAC] Improved MCP Server create/edit UI and QueryPie Upstream Access Token masking

Improvement

  • [Common] Improved to allow User Agent download items to be hidden through environment variables
  • [Common] Fixed Audit Log Export creation error
  • [Common] Improved Workflow submission to allow separate approvals per Connection Owner
  • [Common] Improved Attribute-based Workflow approval rules and assignment method
  • [Common] Added option to disable Multi Agent GPU acceleration
  • [Common] Fixed issue related to password reuse for newly created users
  • [Common] Improved permission expiration notification emails to show environment information and detailed expiration targets
  • [DAC] Added AWS ap-southeast-7 (Thailand) region to Cloud Provider synchronization regions
  • [DAC] Added Redis Username-based authentication support for Reverse Tunnel
  • [DAC] Improved tunnel list sync speed after Headless Agent tunnel refresh
  • [DAC] Improved UserName filter/search usability on the DB Access Control Admin page
  • [DAC] Improved warning text and visibility for Auto Commit Off state
  • [DAC] Fixed Schema-based access control permission check error when using MySQL JSON_TABLE
  • [DAC] Fixed ClickHouse/Trino/Athena HTTP proxy connection failure when Proxy Protocol v2 is enabled on AWS NLB
  • [DAC] Improved BigQuery Connection settings synchronized with Cloud Provider SA Key so Service Account can be edited and retained
  • [DAC] Fixed issue where Proxy settings were automatically disabled in ElastiCache/Valkey Redis Cluster mode (warning message displayed)
  • [DAC] Fixed Athena autocomplete data generation issue
  • [DAC] Fixed Lost Connection issue when running large queries
  • [DAC] Fixed intermittent SQL Server connection issue after upgrading to 11.4.3
  • [DAC] Improved deployment image and driver management by separating the HBase Driver
  • [DAC] Improved Snowflake DML/SQL Request handling
  • [SAC] Added Seamless SSH support in Headless Agent
  • [SAC] Added MFA (OTP) authentication support for Internal DB in Headless Agent
  • [SAC] Improved Cloud Provider Auto Configuration to allow SSH Port and Tag editing
  • [SAC] Improved detail lookup performance by tuning the server_policy_versions query
  • [SAC] Improved security of command block messages
  • [SAC] Fixed issue where RDP sessions were blocked when manually entered account passwords needed to be changed
  • [SAC] Improved Seamless SSH CLI MFA authentication messages
  • [KAC] Added Auto Configuration Upon Synchronization (Tag) support during initial K8s Cloud Provider synchronization
  • [KAC] Improved KAC Web Client (beta) to preserve task state and perform operational tasks more reliably

QueryPie 11.6.2 Release

April 21, 2026

New Feature

  • [DAC] Added access control for Audit Log lookup
  • [DAC] Added ClickHouse HTTPS connection support
  • [DAC] Added Custom JDBC Vendor configuration file upload, Driver Class auto-detection, Vault integration, and Firebird-family vendor support
  • [DAC] Added Cubrid support (policy application and Proxy are not supported. However, when ANSI QSI is enabled, policy application is partially available within the parser’s supported scope.)
  • [SAC] Added single Server Policy lookup API
  • [KAC] Added KAC Web Client (beta)
  • [MCP] Added tools to query DAC/SAC/KAC audit logs through MCP
  • [AI Chat] Added ability to view analysis results as charts
  • [AI Chat] Improved integration to use the work context of SQL Editor and KAC Web Terminal

Improvement

  • [Common] Improved Attribute-based Workflow approval processing
  • [Common] Improved email display in approval documents to distinguish approvers with the same name
  • [Common] Improved exception handling for Approval Expiration Job
  • [Common] Improved password change flow for users with expired passwords in Admin Page Access Control environments
  • [Common] Improved error messages when duplicate permissions exist during SQL Request handling
  • [Common] Improved response information exposure, Cache-Control, and possibility of viewing other users’ Requests for security review response
  • [DAC] Added setting for default number of rows queried in the Data Tab
  • [DAC] Improved required input indicators for Query Rule UI and ShardingSphere Connection creation
  • [DAC] Improved display of deleted Connection information in Workflow approval history
  • [DAC] Improved table name display when creating SQL Export Requests
  • [DAC] Added Start On Approval disable option
  • [DAC] Improved table search highlighting
  • [DAC] Applied utf8mb4 charset to the DML Snapshot DB for new installations
  • [DAC] Fixed issue where DML Snapshot could be turned off for Connections with Ledger policies
  • [DAC] Fixed External API SQL Request call error when forced DML approval is used
  • [DAC] Improved DB Access History lookup errors and stability
  • [DAC] Improved MongoDB insertMany parsing error
  • [DAC] Fixed SHOW CREATE VIEW permission error when querying Impala VIEW
  • [DAC] Fixed expired password change error for MySQL host-specified accounts
  • [DAC] Improved writer instance routing issue when using DocumentDB Reader endpoint
  • [DAC] Improved SSH Tunneling connection stability
  • [DAC] Improved password input handling for ClickHouse No TLS connections
  • [DAC] Improved Custom JDBC Vendor icon refresh display
  • [SAC] Improved new session creation stability by fixing the cause of port exhaustion in Reverse Tunnel Agent
  • [SAC] Improved lower UI display in the Web Editor left server list
  • [SAC] Improved keyboard-interactive access
  • [KAC] Improved audit information so user requests from KAC Web Client (beta) can be distinguished in Request Audit
  • [KAC] Stabilized and improved usability of KAC Web Client (beta)
  • [MAC] Improved MCP Servers and Role detail screen usability

QueryPie 11.6.1 Release

March 23, 2026

New Feature

  • [DAC] Added temporary draft saving for Workflow SQL Execution Requests and External API integration support
  • [DAC] Added Trino data source Kerberos authentication support
  • [DAC] Added HANA Web Editor Auto Commit ON/OFF and HanaScriptParser-based block syntax handling support
  • [KAC] Added Vault-based GCP Cloud Provider and GKE integration support
  • [AI Chat] Added AI Chat Audit menu and Export support
  • [AI Chat] Added feature to integrate DAC SQL Editor context with AI Chat
  • [MAC] Added MCP Access Control feature to establish MCP Servers, Access Control, and Role management foundation

Improvement

  • [Common] Fixed error when running migrate.sh list in new installation environments
  • [Common] Improved OAuth Client Application to manage scopes, redirect URLs, and registration information more flexibly
  • [Common] Improved exposure of detailed internal information in login error responses
  • [Common] Added setting to apply Secure attribute so login session cookies are sent only over secure connections in HTTPS environments
  • [DAC] Improved Query Rule UI and safeguards - organized ALTERNATE_ANALYSIS naming, improved create/update UX
  • [DAC] Expanded Selectable QSI - show verified vendors first, allow vendors without QSI, and enhance syntax support for CREATE/UNNEST/Trino/HANA
  • [DAC] Improved Custom JDBC Vendor - added Kerberos additional authentication, icon and limit style, Object info data tab, and SQL Editor compatibility
  • [DAC] Fixed masking exemption permission application error when exporting JOIN query and Expression columns
  • [DAC] Improved SQL handling stability by data source such as Trino, Impala, Vertica, and SAP HANA
  • [DAC] Improved exception permission expiration handling so SQL execution flow remains stable even after Policy Exception expires
  • [DAC] Improved Query Audit search behavior to accurately query audit logs with table(s) filter
  • [SAC] Fixed issue where sessions ended when arrow keys were entered in SSH shell
  • [SAC] Improved Command Detection exception handling when using kubectl commands
  • [KAC] Improved Activity Log display and roleset key reissue behavior during Vault and GKE integration
  • [KAC] Fixed missing namespace permission check for cluster-scoped Kubernetes resources
  • [AI Chat] Improved AI Chat Audit permissions, time display, filtering, and chat result screen navigation stability
  • [MAC] Fixed bugs related to MCP reauthentication and Access Control

QueryPie 11.6.0 Release

February 13, 2026

New Feature

  • [Common] AI Chat basic functionality added (including MCP Tool invocation and conversation history management support)
  • [DAC] AWS Secrets Manager integration support - Secret Store functionality added to automatically retrieve DB connection passwords from AWS Secrets Manager
  • [DAC] Query Rule functionality added - support for configuring ALLOW/DENY/SKIP filtering rules based on SQL query patterns
  • [DAC] Custom JDBC Vendor added - support for uploading custom JDBC drivers and managing Custom JDBC Configurations, with ANSI SQL level query analysis support

Improvement

  • [Common] OAuth Client management improvement - scope selection, multiple redirect URLs, detail page introduction, and DCR endpoint type stability enhancement
  • [Common] Fixed issue where emails were sent even when Email Integration workflow notification was disabled
  • [Common] Fixed issue where qpctl command was not found due to non-existent /usr/local/bin directory during macOS Multi-Agent installation
  • [DAC] MySQL LOAD DATA LOCAL INFILE large file processing improvement
  • [DAC] Unnecessary metadata query improvement during Trino proxy connection
  • [DAC] Resolved SAP HANA SECONDDATE error caused by Julian/Gregorian calendar difference
  • [DAC] Aborted status check in SQL Request Workflow - fixed duplicate execution bug caused by singleton object contamination
  • [DAC] Policy support added for PostgreSQL RETURNING clause
  • [DAC] Fixed minWritableBytes error when querying SAP HANA BLOB type columns
  • [DAC] Changed SAP BTP Web Editor comment style to ANSI SQL
  • [DAC] Fixed missing Audit Log recording for Web Editor context menu DDL operations (Truncate/Drop/Rename)
  • [DAC] Fixed issue where logs were duplicated by the number of WHERE conditions in Policy Audit Log
  • [DAC] Reverse Tunnel Server Redis TLS support and cluster mode auto-detection improvement
  • [DAC] Fixed inability to connect to Redis Cluster through Reverse Tunnel
  • [DAC] Improved to display clear error message when HTTPS certificate is not configured
  • [DAC] Fixed issue where Workflow Tag Display feature was not shown when New DAC Policy Management was disabled
  • [SAC] Server Agent code signing verification logic improvement - certificate change compatibility secured
  • [SAC] Fixed issue where VMs were missing due to resource path case mismatch during Azure Cloud Provider synchronization
  • [SAC] Fixed IndexOutOfBoundsException issue during Cloud Provider synchronization
  • [WAC] Key Pair validation logic added when uploading Root CA Certificate
Last updated on
Release Notes11.5.0 ~ 11.5.12