Boundary 1.1.x release notes

Release notes provide an at-a-glance summary of key updates to new versions of Boundary.

We encourage you to upgrade to the latest release of Boundary to take advantage of continuing improvements, critical fixes, and new features.

Latest versions

Boundary

Boundary 1.1.1

Released: 2026-11-05

Editions: HCP and Enterprise

Bug fixes and security patches

• Fixed an issue that could cause Boundary to skip required database migrations. Refer to Recommended upgrade paths for more information.

Boundary 1.1.0

Released: 2026-10-26

Editions: HCP and Enterprise

New features

• App tokens - App tokens are a new Boundary resource that enables machine-to-machine authentication. They authenticate requests to Boundary's API or CLI, support grants and grant scopes, and have a required expiration time and an optional maximum inactivity time.

• Boundary MCP server (Public preview) - The Boundary MCP server connects AI assistants to the Boundary API so you can inspect and manage Boundary resources such as targets, sessions, users, and roles using natural language.

  The Boundary MCP server is a public preview feature. Public preview functionality is stable, but possibly incomplete and subject to change. We strongly discourage using preview features in production deployments of Boundary.

Improvements and behavior changes

• Azure Entra ID group overage claim resolution - OIDC auth methods configured with provider-type azure can now resolve group overage claims by retrieving full group memberships from Microsoft Graph when a user belongs to more than 200 groups.
• Cross-account discovery in AWS dynamic host catalogs - AWS dynamic host catalogs can now discover EC2 instances across multiple AWS accounts and IAM roles using a two-hop AssumeRole chain. Create one catalog per target account, all routed through a single self-managed worker in the principal account.
• Video caching for RDP session recording - Workers now cache RDP session recording videos locally after the first download, so subsequent streaming requests reuse the cached copy instead of re-downloading the video.
• OIDC managed group filter performance - OIDC authentication now evaluates managed group filters concurrently to reduce latency.

Bug fixes and security patches

• Argon2 password verification could exceed safe concurrency limits during authentication because it did not use the shared hashing permit pool. This issue is now resolved.
• Fixed an issue where LDAP managed group membership and grants leaked across auth methods when group names matched.
• The boundary connect command previously accepted local proxy connections from any OS user on the same machine, allowing other users to reuse an active session. This issue is now resolved. This fix is supported on Linux, macOS, and Windows.

Boundary Desktop

Boundary Desktop 2.7.0

Released: 2026-10-26

New features

• No new features

Improvements and behavior changes

• No improvements or behavior changes

Bug fixes and security patches

• Improved error handling when the Boundary CLI is missing or the executable has been renamed.
• Fixed an issue where an error message was not displayed when connecting to targets.

Client Agent

Client Agent 1.1.0

Released: 2026-10-26

New features

• Client Agent diagnostics - The Client Agent can now generate a ZIP bundle of diagnostic information about your system, network, Client Agent, and security environment to help troubleshoot connectivity, DNS, and configuration issues.

Improvements and behavior changes

• No improvements or behavior changes

Bug fixes and security patches

• No bug fixes or security patches

Boundary installer

Boundary installer 1.1.0

Released: 2026-10-26

The Boundary installer version 1.1.0 contains the following:

• Boundary CLI version 1.1.0
• Boundary Desktop version 2.7.0
• Client Agent version 1.1.0
• Client cache version 1.1.0

Refer to Install Boundary Clients for more information about using the Boundary installer.

Known issues

If you replace or modify the binaries included in the Boundary installer, it may no longer function properly.