Release Name: v2026.08
Latest Hotfix Name: N/A
Release Date: 2026-08-31
Latest Hotfix Date: N/A
These are the release notes of Monopam v2026.08
Monopam is a Privileged Access/Account Management solution for enterprise-level organizations. Monopam has enterprise grade features, and these features help companies to secure their privileged account and access critical environments.
These release notes contains following information.
-
New Features
-
Improvement
-
Bug Fixes
New Features
In this release 29 New Features published.
|
Key |
Version |
Type Name |
Release Notes |
|---|---|---|---|
|
MPAM-691 |
v2026.08 |
New Feature |
The Windows and Linux EPM agents execute Flow v2 graphs, including an MFA gate, approval showing the command line, a JIT window and audit branches. |
|
MPAM-697 |
v2026.08 |
New Feature |
Added an EPM policy simulator that acts as the reference evaluator and is kept identical to both the Windows and Linux agents. |
|
MPAM-699 |
v2026.08 |
New Feature |
Introduced Monofor Identity for Linux, the EPM agent that enforces endpoint privilege management policies on Linux hosts. |
|
MPAM-700 |
v2026.08 |
New Feature |
The Linux resource agent ships as tarball packages with SysV init support, IPv4/IPv6 selection and parity with the legacy API. |
|
MPAM-703 |
v2026.08 |
New Feature |
Database Proxy now supports Oracle, Db2, Sybase and SAP HANA, including credential injection and PII masking. |
|
MPAM-704 |
v2026.08 |
New Feature |
Database Proxy gained query guardrails, and approval policy expressions can now be bound to database queries. |
|
MPAM-718 |
v2026.08 |
New Feature |
Native database clients such as psql and DBeaver now wait for an approval decision instead of failing with "Access denied". |
|
MPAM-721 |
v2026.08 |
New Feature |
Introduced the Monopam CLI for working with Monopam from the command line. |
|
MPAM-722 |
v2026.08 |
New Feature |
Introduced Machine Identity for managing non-human identities and their access through Monopam. |
|
MPAM-723 |
v2026.08 |
New Feature |
Introduced Access Gateway for brokering access to protected resources through Monopam. |
|
MPAM-725 |
v2026.08 |
New Feature |
Building Template provides atomic multi-step certificate deployment with rollback and a run history. |
|
MPAM-726 |
v2026.08 |
New Feature |
A Deployments overview lists certificate deployments and supports manual and automatic retry with backoff. |
|
MPAM-727 |
v2026.08 |
New Feature |
Certificate Manager can import and deploy certificates to FortiGate devices through a FortiManager connector. |
|
MPAM-728 |
v2026.08 |
New Feature |
HashiCorp Vault can be used as a certificate authority for issuing certificates in Certificate Manager. |
|
MPAM-736 |
v2026.08 |
New Feature |
Certificate Manager can generate and use keys stored on a hardware security module through PKCS#11. |
|
MPAM-738 |
v2026.08 |
New Feature |
Certificate events can be forwarded to a SIEM in Generic JSON, Splunk HEC or CEF format. |
|
MPAM-740 |
v2026.08 |
New Feature |
Alert Channels support custom webhook body and headers, an ITSM ticket mode, labels and vault references for credentials. |
|
MPAM-742 |
v2026.08 |
New Feature |
Added an Alert Settings page for expiry thresholds, email recipients and webhook channels, and an owner field on certificates. |
|
MPAM-744 |
v2026.08 |
New Feature |
ACME certificates can be validated with DNS-01 challenges through 14 supported DNS providers. |
|
MPAM-749 |
v2026.08 |
New Feature |
Certificates can be deployed to generic Linux servers as a deployment target type. |
|
MPAM-752 |
v2026.08 |
New Feature |
Agents connect out to Monopam over WebSocket, so no inbound port needs to be opened on the agent host. |
|
MPAM-753 |
v2026.08 |
New Feature |
Commands sent to agents are signed with Ed25519, keys are exchanged at enrollment, and agents return signed execution receipts. |
|
MPAM-755 |
v2026.08 |
New Feature |
macOS machines can be imported as resources by installing and enrolling the Monopam resource agent. |
|
MPAM-756 |
v2026.08 |
New Feature |
Resources can be discovered from Hetzner, AWS, Azure, Google Cloud, Vultr and Scaleway, including periodic discovery. |
|
MPAM-757 |
v2026.08 |
New Feature |
Custom Fields add administrator-defined fields with multiple field types, default values, required and validation rules, lookups, uniqueness and audit. |
|
MPAM-758 |
v2026.08 |
New Feature |
AD Bridging gained an access policy that is secure by default and grants access per user. |
|
MPAM-759 |
v2026.08 |
New Feature |
Users can request access to resources and vault items themselves, governed by a Request Policy. |
|
MPAM-760 |
v2026.08 |
New Feature |
Introduced Script Management for storing, editing and reusing scripts across Monopam. |
|
MPAM-761 |
v2026.08 |
New Feature |
Introduced Run As, which lets an operation on a resource run under a selected account. |
Improvement
In this release 19 Improvements published.
|
Key |
Version |
Type Name |
Release Notes |
|---|---|---|---|
|
MPAM-698 |
v2026.08 |
Improvement |
EPM approvals now use a single decision screen, with defined cancel and revoke rules and notifications across the request lifecycle. |
|
MPAM-701 |
v2026.08 |
Improvement |
The separate Access and Resources menus were merged into a single, permission-aware Resources view. |
|
MPAM-702 |
v2026.08 |
Improvement |
The dashboard and Quick Connect now show only the resources and actions the current user is permitted to use. |
|
MPAM-705 |
v2026.08 |
Improvement |
Database Proxy health is now visible in the UI, and an alert is raised when the proxy goes down. |
|
MPAM-720 |
v2026.08 |
Improvement |
The Database Access Keys list gained a search box and per-column filters. |
|
MPAM-724 |
v2026.08 |
Improvement |
Several usability and behavior improvements to Secret Management. |
|
MPAM-746 |
v2026.08 |
Improvement |
Certificate Manager gained bulk actions on certificates, reports and ACME External Account Binding (EAB) support. |
|
MPAM-747 |
v2026.08 |
Improvement |
Renewed certificates are now deployed to their targets regardless of which renewal path produced them. |
|
MPAM-748 |
v2026.08 |
Improvement |
The certificate inventory can be grouped by domain, and certificates can be archived out of the active list. |
|
MPAM-750 |
v2026.08 |
Improvement |
Each deployment target can be configured individually to run deployment commands with sudo. |
|
MPAM-751 |
v2026.08 |
Improvement |
Deployment errors are now shown with full detail, stuck runs can be detected and handled, and saved scripts can be selected for deployment steps. |
|
MPAM-754 |
v2026.08 |
Improvement |
Agents report endpoint inventory (OS, build, model and serial number), and the agent list shows a Channel/Inbound connection badge with a matching filter. |
|
MPAM-762 |
v2026.08 |
Improvement |
PKI vault items can derive the public key from the stored private key or generate a new key pair, and the public key can be revealed. |
|
MPAM-763 |
v2026.08 |
Improvement |
Policies, Resources and Vault gained sidebar filters: a policy type rail, resource types, credential types and a directory sidebar. |
|
MPAM-764 |
v2026.08 |
Improvement |
The Resources area gained an Active Connections view listing currently open connections. |
|
MPAM-765 |
v2026.08 |
Improvement |
The Privilege tab now uses the standard ObjectPicker for selecting objects instead of a static list. |
|
MPAM-766 |
v2026.08 |
Improvement |
The Requests list shows the requested object in its own column and uses readable request type labels. |
|
MPAM-767 |
v2026.08 |
Improvement |
Files can be copied to and from resources during brokered connections. |
|
MPAM-768 |
v2026.08 |
Improvement |
RemoteApp streaming sessions now enforce the expected keyboard layout on the remote session instead of inheriting the gateway service layout. |
Bug Fixes
In this release 11 Bug Fixes published.
|
Key |
Version |
Type Name |
Release Notes |
|---|---|---|---|
|
MPAM-769 |
v2026.08 |
Bug |
Users without the required permissions could see menus and call the related APIs. Fixed across menus, Requests (Everyone), type filters and the 403 redirect. |
|
MPAM-770 |
v2026.08 |
Bug |
The "Generate OTP Code" action copied the text "undefined" to the clipboard instead of the generated code. Fixed so the actual code is copied. |
|
MPAM-771 |
v2026.08 |
Bug |
An agent that was re-enrolled with the same name did not appear in the agent list. Fixed so the re-enrolled agent is shown. |
|
MPAM-772 |
v2026.08 |
Bug |
Import Resource with Agent hung indefinitely when no gateway was available. Fixed so the flow no longer hangs in that case. |
|
MPAM-773 |
v2026.08 |
Bug |
ACME certificate renewal failed with "Object reference not set". Fixed so renewal completes. |
|
MPAM-774 |
v2026.08 |
Bug |
Certificate deployment failed with the error "A certificate is required.". Fixed so the certificate is passed to the deployment correctly. |
|
MPAM-775 |
v2026.08 |
Bug |
Deployments using an encrypted SSH private key failed with "Private key is encrypted but passphrase is empty". Fixed so the passphrase is used. |
|
MPAM-776 |
v2026.08 |
Bug |
Clicking Continue on a database resource opened a new connection each time instead of reusing the existing one and showed no connection details. Fixed so the existing connection is reused. |
|
MPAM-777 |
v2026.08 |
Bug |
The Database Proxy went down intermittently, interrupting database sessions. Fixed so the proxy stays available. |
|
MPAM-778 |
v2026.08 |
Bug |
Links to expired certificates on the dashboard pointed to the wrong place. Fixed so they open the correct certificate. |
|
MPAM-779 |
v2026.08 |
Bug |
A set of minor UI fixes: unsaved changes warning, reveal button shift, dropdown fonts, select and switch alignment, and CSS precedence. |