Appwrite·Oct 24, 2026, 05:54 PMFixMay break your integrationAI-assisted summary

Summary

Backported comprehensive security hardening from 2.6.2 across auth, API keys, databases, realtime, GraphQL, storage, VCS, functions, migrations and messaging; updated Brotli runtime to a patched version fixing CVE‑2026‑111497.
Tightened defaults and permission checks: invalid API keys now return 401, secrets are write‑only, MFA codes compared in constant time, added rate limits, enforced permissions on many services, and removed secret data from public responses.
Introduced new APP_ALLOWED_INTERNAL_ADDRESSES env var for internal relays, upgraded dependent libraries (brotli, libcurl, swoole) and applied numerous bug fixes across the platform.

securitybreakingbugfixsource healthy

Official source Last checked Oct 27, 2026, 9:01 AM

Appwrite / update detail

1.9.10

Official Appwrite changelog summary with source attribution, release tags and upgrade verdicts.

Track this Appwrite release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.

Appwrite·Oct 24, 2026, 05:54 PMFixMay break your integrationAI-assisted summary

Summary

Backported comprehensive security hardening from 2.6.2 across auth, API keys, databases, realtime, GraphQL, storage, VCS, functions, migrations and messaging; updated Brotli runtime to a patched version fixing CVE‑2026‑111497.
Tightened defaults and permission checks: invalid API keys now return 401, secrets are write‑only, MFA codes compared in constant time, added rate limits, enforced permissions on many services, and removed secret data from public responses.
Introduced new APP_ALLOWED_INTERNAL_ADDRESSES env var for internal relays, upgraded dependent libraries (brotli, libcurl, swoole) and applied numerous bug fixes across the platform.

securitybreakingbugfixsource healthy

Official source Last checked Oct 27, 2026, 9:01 AM

DiscussionUsing this release? Share breakages, migration notes or workarounds.

Loading follow options…

keep exploring

Continue with Appwrite

Compare this release with the product timeline and keep the tools you use in one place.

official source

Every summary should remain traceable to the original changelog or release source.

AI-assisted summarysource healthyLast checked Oct 27, 2026, 9:01 AM

digest settings

Already following Appwrite? Add related tools without starting a new digest.