defguard

v1.6.7 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 16d VPN & Tunnels

✓ No known CVEs patched

This release patches 1 known CVE

Topics

authentication forwardauth keycloak multifactor-authentication oauth oauth-provider

+13 more

oauth2-server oidc oidc-provider openid openid-connect openid-connect-provider openvpn pritunl security vpn vpn-server wireguard-ui yubikey

Affected surfaces

auth

Summary

AI summary

Fixes IP assignment performance issues and improves Forward Auth security.

Type	Severity	Summary	CVE
Performance	Medium	Improves IP assignment performance. Improves IP assignment performance. Source: llm_adapter@2026-07-15 Confidence: high	—
Bugfix	Medium	Fixes MFA session validation issues in Forward Auth. Fixes MFA session validation issues in Forward Auth. Source: llm_adapter@2026-07-15 Confidence: high	—
Bugfix	Low	Fixes failing end‑to‑end tests. Fixes failing end‑to‑end tests. Source: llm_adapter@2026-07-15 Confidence: high	—
Refactor	Low	Tags docker images with major version. Tags docker images with major version. Source: llm_adapter@2026-07-15 Confidence: high	—

Full changelog

This is a patch for the major 1.6 release.

It fixes IP assignment performance issues and improves the security of the Forward Auth functionality.

Tag docker images with major version by @j-chmielewski in https://github.com/DefGuard/defguard/pull/3133
fix MFA session validation in forward_auth by @wojcik91 in https://github.com/DefGuard/defguard/pull/3151
port IP assignment optimization from 2.x branch by @wojcik91 in https://github.com/DefGuard/defguard/pull/3157
fix failing e2e tests by @wojcik91 in https://github.com/DefGuard/defguard/pull/3176

Full Changelog: https://github.com/DefGuard/defguard/compare/v1.6.6...v1.6.7

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track defguard

Get notified when new releases ship.

About defguard

Zero-Trust access management with true WireGuard® 2FA/MFA