DBeaverUltimate 26.2.0 herunterladen

Changes since 26.1.0:
- AI assistant:
- Added the ability to use different AI engines in separate Chat conversations
- Added support for Grok AI assistant
- Added the ability to use OpenAI and Grok engines through engine subscriptions, without configuring personal API tokens
- Added user interaction tool to AI Chat. AI can ask follow-up questions with predefined answer options
- Secret management for database credentials:
- Added support for Google Secret Manager
- Added support for Azure Key Vault
- Data Editor:
- Added HTML preview for text/html values in the Value panel
- Data transfer:
- Added the ability to transfer primary and foreign keys, along with data migration, from one database to another
- Redesigned the Tables Mapping step for database-to-database transfer
- Data compare: Added the ability to compare query results without re-executing queries
- Connectivity:
- Added global network profiles that can be used in all projects
- Added support for retrieving passwords from a shell command for native database authentication
- Security:
- Fixed the high vulnerability (CVE-2026-10050) in the jetty-security library. The library was updated to version 12.1.11
- Fixed the high vulnerabilities in the netty-codec libraries. The netty-bom library was updated to version 4.2.16
- Fixed CVE-2026-54291. PostgreSQL driver was updated to version 42.7.13
- Fixed an XXE vulnerability caused by an unhardened XML parser (CWE-611)
- Fixed an XXE vulnerability caused by inconsistent XML sanitization in the Value editor
- Fixed an SQL injection vulnerability related to string formatting (CWE-89) in the Exasol extension in the application
- Fixed an SQL injection vulnerability related to malicious names of downloaded files
- Protected local server port and password data from exposure through dbeaver-instance.properties
- Restricted presentation and execution of malicious content in AI Chat
- Fixed unintended execution of executable files opened from Windows UNC paths
- Fixed a remote code execution vulnerability related to virtual column creation
- Added confirmation and allowlist checks before executing shell commands from connection initialization events
- New drivers:
- Multi-Source Database driver can combine multiple databases into a single data source and run cross-database queries
- DDL Driver: Added the ability to create data sources from DDL scripts to inspect and analyze database structure
- etcd driver
- Apache Doris
- GreptimeDB
- Timeplus
- Driver updates:
- ClickHouse driver was updated to version 0.10.0
- Couchbase driver was updated to version 3.12.1
- Databend driver was updated to version 0.4.8
- Databricks driver was updated to version 3.4.1
- MongoDB driver was updated to version 5.7.0
- PostgreSQL driver was updated to version 42.7.13 (Fixed CVE-2026-54291)
- Starrocks driver was updated to version 1.1.2
- Databases:
- Added OIDC authentication for MongoDB
- BigQuery: the official BigQuery driver is now used by default, and the previous Simba driver was renamed to BigQuery (Legacy)
- LibSQL: Added support for database views
- Redshift: Added Microsoft Entra ID OAuth2 authentication