DBeaverEE 26.2.0

What's new in 26.2.0

Changes since 26.1.0:

• AI assistant:
• Added the ability to use different AI engines in separate Chat conversations
• Added support for Grok AI assistant
• Added the ability to use OpenAI and Grok engines through engine subscriptions, without configuring personal API tokens
• Added user interaction tool to AI Chat. AI can ask follow-up questions with predefined answer options to clarify the request
• Secret management for database credentials:
• Added support for Google Secret Manager
• Added support for Azure Key Vault
• Data Editor:
• Added HTML preview for text/html values in the Value panel
• Data transfer:
• Added the ability to transfer primary and foreign keys, along with data migration, from one database to another
• Redesigned the Tables Mapping step for database-to-database transfer
• Data compare: Added the ability to compare query results without re-executing queries
• Connectivity:
• Added global network profiles that can be used in all projects
• Added support for retrieving passwords from a shell command for native database authentication
• Security:
• Fixed the high vulnerability (CVE-2026-10050) in the jetty-security library. The library was updated to version 12.1.11
• Fixed the high vulnerabilities in the netty-codec libraries. The netty-bom library was updated to version 4.2.16
• Fixed CVE-2026-54291. PostgreSQL driver was updated to version 42.7.13
• Fixed an XXE vulnerability caused by an unhardened XML parser (CWE-611)
• Fixed an XXE vulnerability caused by inconsistent XML sanitization in the Value editor
• Fixed an SQL injection vulnerability related to string formatting (CWE-89) in the Exasol extension in the application
• Fixed an SQL injection vulnerability related to malicious names of downloaded files
• Protected local server port and password data from exposure through dbeaver-instance.properties
• Restricted presentation and execution of malicious content in AI Chat
• Fixed unintended execution of executable files opened from Windows UNC paths
• Fixed a remote code execution vulnerability related to virtual column creation
• Added confirmation and allowlist checks before executing shell commands from connection initialization events
• New drivers:
• DDL Driver: Added the ability to create data sources from DDL scripts to inspect and analyze database structure
• etcd driver
• Apache Doris
• GreptimeDB
• Timeplus …