Skip to content

Intel Owl

v6.7.0 Feature

This release adds 3 notable features for engineering teams evaluating rollout.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

cyber-security cyber-threat-intelligence security dfir enrichment honeynet
+13 more
incident-response intel-owl ioc malware-analysis malware-analyzer osint osint-python python security-tools threat-hunting threat-intelligence threathunting threatintel

Affected surfaces

auth rbac

Summary

AI summary

Updates deps, chatbot, and analyzers across a mixed release.

Full changelog

please refer to the Changelog

What's Changed

  • Ipqs new features by @RamboV in https://github.com/intelowlproject/IntelOwl/pull/3678
  • [GSoC 2026] Scaffold chatbot Django app with ChatSession/ChatMessage models (refs #3712) by @berardifra in https://github.com/intelowlproject/IntelOwl/pull/3715
  • [GSoC 2026] Add optional Ollama service via docker override (refs #3711) by @berardifra in https://github.com/intelowlproject/IntelOwl/pull/3719
  • [GSoC 2026] Add LangChain ReAct agent with job tools and REST endpoint (refs #3720) by @berardifra in https://github.com/intelowlproject/IntelOwl/pull/3722
  • [Connectors] Refactor connector testing framework 1 by @sanjib2006 in https://github.com/intelowlproject/IntelOwl/pull/3723
  • [GSoC 2026] Add endpoint to retrieve a chat session's messages (refs #3725) by @berardifra in https://github.com/intelowlproject/IntelOwl/pull/3726
  • [GSoC 2026] Add chat message retention policy with configurable TTL (refs #3716) by @berardifra in https://github.com/intelowlproject/IntelOwl/pull/3727
  • [GSoC 2026] Add investigation LLM tools to the chatbot agent (refs #3728) by @berardifra in https://github.com/intelowlproject/IntelOwl/pull/3729
  • [Connectors] Fix before_run to fail on partial analyer failures when run_on_failure is False by @sanjib2006 in https://github.com/intelowlproject/IntelOwl/pull/3730
  • fix(analyzers): handle empty results in Netlas by @Valyrian-Code in https://github.com/intelowlproject/IntelOwl/pull/3734
  • [GSoC 2026] Add get_data_model LLM tool to the chatbot agent (refs #3728) by @berardifra in https://github.com/intelowlproject/IntelOwl/pull/3731
  • [Connectors] Refactor YETI to API v2 payload and auth schemas by @sanjib2006 in https://github.com/intelowlproject/IntelOwl/pull/3736
  • [GSoC 2026] Add analyzer/playbook LLM tools to the chatbot agent (refs #3732) by @berardifra in https://github.com/intelowlproject/IntelOwl/pull/3740
  • Refactor YETI analyzer to match API v2 auth schemas by @sanjib2006 in https://github.com/intelowlproject/IntelOwl/pull/3741
  • [GSoC 2026] Refactor: split chatbot tool serializers/tests into per-tool packages (refs #3732) by @berardifra in https://github.com/intelowlproject/IntelOwl/pull/3742
  • [GSoC 2026] Add analyze_observable action tool to the chatbot agent (refs #3732) by @berardifra in https://github.com/intelowlproject/IntelOwl/pull/3744
  • [GSoC 2026] Add chatbot WebSocket consumer with token streaming (refs #3756) by @berardifra in https://github.com/intelowlproject/IntelOwl/pull/3757
  • [GSoC 2026] Switch the chatbot agent to native tool calling (refs #3761) by @berardifra in https://github.com/intelowlproject/IntelOwl/pull/3762
  • fix(analyzers): handle empty ASN history in BGPRanking by @Valyrian-Code in https://github.com/intelowlproject/IntelOwl/pull/3733
  • [GSoC 2026] Add chat sessions list with backend titles and unlocked navigation by @berardifra in https://github.com/intelowlproject/IntelOwl/pull/3765
  • fix(frontend): re-sync package-lock.json with package.json (npm ci) by @berardifra in https://github.com/intelowlproject/IntelOwl/pull/3769
  • [GSoC 2026] Proactive chatbot availability (health endpoint + drawer probe) by @berardifra in https://github.com/intelowlproject/IntelOwl/pull/3768
  • [GSoC 2026] Inject current-page context into the chatbot agent (refs #3770) by @berardifra in https://github.com/intelowlproject/IntelOwl/pull/3771
  • [GSoC 2026] Extract system prompt to file with per-tool selection guidance (refs #3774) by @berardifra in https://github.com/intelowlproject/IntelOwl/pull/3775
  • Refactor Connector Testing framework 2: Migrate MISP tests to base connector test framework by @sanjib2006 in https://github.com/intelowlproject/IntelOwl/pull/3778
  • [GSoC 2026] Add context-aware quick-action buttons to the chat panel (refs #3772) by @berardifra in https://github.com/intelowlproject/IntelOwl/pull/3773
  • [GSoC 2026] feat(chatbot): add per-user rate limiting to REST and WebSocket entry points by @berardifra in https://github.com/intelowlproject/IntelOwl/pull/3777
  • Refactor MISP Connector Exception Handling Closes #3706 by @sanjib2006 in https://github.com/intelowlproject/IntelOwl/pull/3781
  • [GSoC 2026] Harden chatbot REST + search_jobs (security-review follow-ups) by @berardifra in https://github.com/intelowlproject/IntelOwl/pull/3780
  • [GSoC 2026] Job tools UI parity: scope with visible_for_user (refs I-2) by @berardifra in https://github.com/intelowlproject/IntelOwl/pull/3783
  • [GSoC 2026] M-1 guardrail backend: analyze_observable preview-only + confirm endpoint by @berardifra in https://github.com/intelowlproject/IntelOwl/pull/3787
  • [GSoC 2026] M-1 guardrail frontend: analyze Confirm/Cancel card (Refs #3791) by @berardifra in https://github.com/intelowlproject/IntelOwl/pull/3792
  • [Connectors] Refactor Testing Framework 3: Migrate OpenCTI tests to BaseConnectorTest by @sanjib2006 in https://github.com/intelowlproject/IntelOwl/pull/3795
  • [GSoC 2026] test(chatbot): E2E chat pipeline + guardrail + ChatPanel full-turn by @berardifra in https://github.com/intelowlproject/IntelOwl/pull/3794
  • [GSoC 2026] test(chatbot): N+1 query-count guards for the agent tools by @berardifra in https://github.com/intelowlproject/IntelOwl/pull/3797
  • [Connectors] Remove Legacy monkeypatches and test files by @sanjib2006 in https://github.com/intelowlproject/IntelOwl/pull/3799
  • Add CVE_Exploitability analyzer (CISA KEV + FIRST EPSS) for CVE observables by @DevamShah in https://github.com/intelowlproject/IntelOwl/pull/3802
  • [Connectors] Fix failing connector tests caused due to removal of monkeypatches by @sanjib2006 in https://github.com/intelowlproject/IntelOwl/pull/3807
  • [GSoC 2026] chatbot: recover from invalid tool arguments by @berardifra in https://github.com/intelowlproject/IntelOwl/pull/3809
  • fix exiftool failed download by @mlodic in https://github.com/intelowlproject/IntelOwl/pull/3812
  • Add RDAP analyzer by @thunderstornX in https://github.com/intelowlproject/IntelOwl/pull/3760
  • [Connectors] Implement health check for connectors by @sanjib2006 in https://github.com/intelowlproject/IntelOwl/pull/3811
  • [GSoC 2026] fix: make '--ollama' start option work in test/dev mode. Closes
    #3829 by @berardifra in https://github.com/intelowlproject/IntelOwl/pull/3830
  • [GSoC 2026] feat: self-deployed LLM chatbot for natural-language threat intelligence by @berardifra in https://github.com/intelowlproject/IntelOwl/pull/3831
  • [GSoC 2026] fix(chatbot): round up rate limiter retry_after by @berardifra in https://github.com/intelowlproject/IntelOwl/pull/3836
  • test(connectors): remove redundant execution logic from test_subclasses (Closes #3838) by @sanjib2006 in https://github.com/intelowlproject/IntelOwl/pull/3839
  • Gsoc 2026/connectors by @mlodic in https://github.com/intelowlproject/IntelOwl/pull/3832
  • [GSoC 2026] Run --ollama in CI and gate the slow build to develop→master by @berardifra in https://github.com/intelowlproject/IntelOwl/pull/3837
  • build(deps): bump pyelftools from 0.31 to 0.33 in /requirements by @dependabot[bot] in https://github.com/intelowlproject/IntelOwl/pull/3820
  • build(deps): bump google-cloud-webrisk from 1.20.0 to 1.22.0 in /requirements by @dependabot[bot] in https://github.com/intelowlproject/IntelOwl/pull/3815
  • build(deps): bump actions/cache from 5 to 6 by @dependabot[bot] in https://github.com/intelowlproject/IntelOwl/pull/3825
  • build(deps): bump actions/setup-python from 6.2.0 to 6.3.0 by @dependabot[bot] in https://github.com/intelowlproject/IntelOwl/pull/3826
  • build(deps): bump library/nginx from 1.29.2-alpine to 1.31.2-alpine in /docker by @dependabot[bot] in https://github.com/intelowlproject/IntelOwl/pull/3803
  • Update GoReSym from v3.0.2 to v3.3 by @github-actions[bot] in https://github.com/intelowlproject/IntelOwl/pull/3665
  • Update droidlysis from c1645a5 to ce37151 by @github-actions[bot] in https://github.com/intelowlproject/IntelOwl/pull/3666

New Contributors

  • @Valyrian-Code made their first contribution in https://github.com/intelowlproject/IntelOwl/pull/3734
  • @DevamShah made their first contribution in https://github.com/intelowlproject/IntelOwl/pull/3802
  • @thunderstornX made their first contribution in https://github.com/intelowlproject/IntelOwl/pull/3760
  • @github-actions[bot] made their first contribution in https://github.com/intelowlproject/IntelOwl/pull/3665

Full Changelog: https://github.com/intelowlproject/IntelOwl/compare/v6.6.1...v6.7.0

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Intel Owl

Get notified when new releases ship.

Sign up free

About Intel Owl

IntelOwl: manage your Threat Intelligence at scale

All releases →

Related context

Beta — feedback welcome: [email protected]