Issues

Issues

• Add evidence files on compilance

  Feature

  utmstack/UTMStack#3103 · opened on Nov 11, 2026

• user behavioral anomaly detection (login hour, IP, volume)

  Feature

  utmstack/UTMStack#3072 · opened on Nov 9, 2026

• Backend crash loop on upgrade to v11.3.0: duplicate key on pk_utm_dashboard_visualization (sequence shares range with fixed system ids)

  utmstack/UTMStack#3056 · opened on Nov 6, 2026

• dashboard surviving tenant

  Bug

  utmstack/UTMStack#3055 · opened on Nov 6, 2026

• JSON Input: logs accepted (HTTP 200) but never indexed, no error logged (v11.3.0, multi-node Swarm)

  utmstack/UTMStack#3051 · opened on Nov 5, 2026

• tag filtering on alerts page

  Bug

  utmstack/UTMStack#3048 · opened on Nov 5, 2026

• Windows agent auto-update (11.1.4 → 11.1.5) leaves the agent service stopped: updater does not wait for the service to stop, rollback/start fails with exit 1056, next runs fail with 1062

  utmstack/UTMStack#3047 · opened on Nov 5, 2026

• Invitation and reset emails break their own link

  Bug

  utmstack/UTMStack#3045 · opened on Nov 4, 2026

• soar flow sql mode bypassing tenat scoping

  Bug

  utmstack/UTMStack#3044 · opened on Nov 4, 2026

• soar flows execution commands

  Bug

  utmstack/UTMStack#3043 · opened on Nov 4, 2026

• TFA security hole

  Bug

  utmstack/UTMStack#3042 · opened on Nov 4, 2026

• dashboard creation allowing systemOwned

  Bug

  utmstack/UTMStack#3040 · opened on Nov 4, 2026

• dashboard redirections

  Feature

  utmstack/UTMStack#3025 · opened on Nov 2, 2026

• pdf report on datasources page

  Feature

  utmstack/UTMStack#3024 · opened on Nov 2, 2026

• password on interactive console

  Bug

  utmstack/UTMStack#3009 · opened on Oct 29, 2026

• adduser labeling on user-auditor

  Feature

  utmstack/UTMStack#3008 · opened on Oct 29, 2026

• predefined alert responses

  Feature

  utmstack/UTMStack#3005 · opened on Oct 28, 2026

• manual flow execution

  Feature

  utmstack/UTMStack#3004 · opened on Oct 28, 2026

• Adds support for cloud identity providers so the user-auditor module can track user lifecycle events.

  Feature

  utmstack/UTMStack#2989 · opened on Oct 27, 2026

• (Data Sources) Sources that stop sending logs never become "Disconnected"

  utmstack/UTMStack#2986 · opened on Oct 27, 2026

• live operations view

  utmstack/UTMStack#2984 · opened on Oct 26, 2026

• v12 Alert drawer shows child alert events as empty rows (only id and timestamp)

  Bug

  utmstack/UTMStack#2977 · opened on Oct 23, 2026

• add empty dashoard shadowing

  Feature

  utmstack/UTMStack#2972 · opened on Oct 23, 2026

• new prebuild platform shell nodes

  Feature

  utmstack/UTMStack#2971 · opened on Oct 23, 2026

• scope shell templates by platform

  Bug

  utmstack/UTMStack#2970 · opened on Oct 23, 2026