winget install --id Gravitational.TeleportConnectAbout Teleport Connect
Teleport Connect provides easy and secure access to SSH servers, databases, applications, Windows desktops, and Kubernetes clusters.
What's new in 18.8.1
- Improved the performance of certain predicate expressions used to select SSH servers. #66769 - Fixes an issue preventing joins using the azure join method in regions where the trust chain has been updated with an additional intermediate. #66764 - Fix Teleport Connect's VNet failing to start on Linux when an older tsh is present at /usr/local/bin/tsh. #66757 - The MFA prompt now includes the name of a leaf cluster if the resource belongs to one. #66741 - When attempting to access a web app protected by Device Trust from an untrusted device, browsers now see a simple HTML page instead of a plain text response. #66717 - Improved the error message on login in tsh and Teleport Connect when /webapi/ping returns a non-200 response. #66712 - The kubernetes join method now supports allow rules targeting specific service account names and namespaces and supports wildcards when the new fields are used. #66700 - Raise the app access upstream response-header cap from 5 minutes to 1 hour so long-running HTTP requests complete. #66687 - Fixed an issue preventing host sudoers entries from being written on newer Linux distributions (i.e. Ubuntu 25.10) using sudo-rs. #66433 Enterprise: - Internal performance optimizations to the SCIM PATCH flow when multiple parallel PATCH requests target the same SCIM groups. - Fixed an issue with sessions failing to be summarized when using non-alternate buffer TUI applications. - Commands in the session summary timeline now show detected MITRE attack IDs and suspicious flags. - Fixed Web UI to no longer show audit review prompts or 0001-01-01 dates for...
Version history
| Version | Updated | Notes |
|---|---|---|
| 18.8.1 | Unknown | - Improved the performance of certain predicate expressions used to select SSH servers. #66769 - Fixes an issue preventing joins using the azure join method in regions where the trust chain has been updated with an addit... |
| 18.8.0 | Unknown | Performance improvements in the SSH service Thanks to internal improvements (#66220), the Teleport SSH service memory usage and latency when opening shells/running commands is significantly lower than previous versions.... |
| 18.7.6 | Unknown | No notes |
| 18.7.5 | Unknown | - Prevented a possible panic during TTY session processing/playback/summarization from crashing Teleport. - Fixed an upload failure for encrypted recordings near the 4MB limit caused by metadata exceeding the maximum mes... |
| 18.7.4 | Unknown | Teleport 18.7.4 |
| 18.7.3 | Unknown | Teleport 18.7.3 |
| 18.7.2 | Unknown | - Added TeleportAccessMonitoringRuleV1 support to the Teleport Kubernetes operator. #64368 - Added update scoped token support to tctl and update upsert scoped token rpc to not require status. #64345 - Improved performan... |
| 18.7.1 | Unknown | - Fixed web app access in leaf clusters when VNet is enabled. #63993 - Fixed an issue where desktop session recordings would show a white screen instead of the recording player, and fixed an issue where if a session's me... |
| 18.7.0 | Unknown | Session timeline view for Identity Security Session player for Identity Security users received an enhanced timeline view with per-command session breakdown. Organization-level auto-discovery for AWS EC2 instances AWS au... |
| 18.6.8 | Unknown | - Added --exec-cmd and --exec-arg flags to tsh proxy kube to allow launching custom commands like k9s directly without requiring environment variable workarounds. #63066 Enterprise: - Fixes a panic that occurred when Ext... |
| 18.6.7 | Unknown | - Revised help messages for event handler CLI commands. #63620 - Fixed tsh ssh user@foo=bar uptime from running serially if users did not have role:read permissions. #63612 - The minimum version of macOS required to run... |
| 18.6.6 | Unknown | - Fixed tsh/Linux sending a too-large username for device trust. #63387 - Fixed an issue where MCP JSON-RPC messages with mixed-case field names could be parsed inconsistently and re-serialized to lower cases. Teleport n... |
| 18.6.5 | Unknown | - Fixed a CredentialContainer error when attempting to log in to the Web UI with a hardware key using Firefox >=147.0.2. #63245 - Added support for deleting cluster alerts via tctl alerts rm <alertID> command. #63211 - U... |
| 18.6.4 | Unknown | - Fixed GCS session recording backend not respecting rate limits. #62986 - Fixed a bug where members of a former owner Access List retain the owner permissions grants of the former owned Access List. It also fixes the is... |
| 18.6.3 | Unknown | Teleport 18.6.3 |
| 18.6.2 | Unknown | Teleport 18.6.2 |
| 18.6.1 | Unknown | - Fixed an issue preventing text editors in the Web UI from allowing edits. #62488 - Acking a cluster alert no longer requires the create permission. #62468 - Fixed service health reason formatting for bot instances in t... |
| 18.6.0 | Unknown | Identifier-first login enhancements Teleport now automatically passes the username to the identifier provider when performing Identifier-first login with OIDC or SAML IdPs. GitHub Actions Kubernetes Wizard Teleport now s... |
| 18.5.1 | Unknown | - Fixed Teleport instances running the Auth Service sometimes not becoming ready during initialization. #62194 - Fixed an Auth Service bug causing the event handler to miss up to 1 event every 5 minutes when storing audi... |
| 18.5.0 | Unknown | Kubernetes support for Relay Service The relay service now facilitates Kubernetes connections. Shared state between tsh and Teleport Connect Teleport Connect and tsh now share the same local state. Logins from one app wi... |