Archived release notes

Version v2.5.1

Release Date: 16 December 2025

Support licensing with License Management Server (LMS)

New licensing management model for MetaDefender Cluster to allow license management server to manage the product's license status.

Further Enhancements

• Improve the performance of fetching processing history.
• Support sorting processing history by duration.
• Enhance product stability.

Security Enhancements

Upgraded library for vulnerability fixes:

• PostgreSQL v14.20

Bug Fixes

• Fixed an issue where certain archive file remained stuck in the in-progress state.
• Fixed an issue that led to the process start time of batch is invalid.
• Fixed a crash in MD Cluster Control Center when adding a worker using IPv6.
• Addressed incorrect status reporting of MD Cluster Worker when a machine was unexpectedly powered off.
• Fixed an issue where the MD Cluster Worker was unable to upgrade its hosted MD Core.

Version v2.5.0

Release Date: 30 October 2025

MetaDefender Cluster license

New licensing model requires a MetaDefender Cluster license.

Chart for in-queue objects in System Activity

A new chart in System Activity shows the overall count of objects pending processing.

Dedicated callback service

A new optional service is introduced to dedicate sending the results of finished scan requests to the webhook server. The service can be scaled out easily and upgraded seamlessly.

Engine package update initiated by folder monitoring

Modification of engine packages in a given folder can be monitored and notified to MetaDefender Core instances for engine updates.

Time availability for scan request acceptance

MetaDefender Cluster API Gateway will accept scanning requests from clients during a pre-define time windows.

Workflow priority

MetaDefender Cluster Control Center allows system administrators to configure the priority of a specific workflow.

RESTful API

MetaDefender Cluster API Gateway:

• Introduce metadata request header to include vulnerability details in the response of GET /batch/{batch_id}/certificate API.
• Introduce GET /file/webhook/{data_id} API to retrieve the callback status of a scan request using data_id.
• Support callbackurl header in requests to POST /file API.
• Include callback service status in GET /readyz API.

MetaDefender Cluster Control Center:

• Introduce PUT and GET /admin/config/sessioncookie to modify and get session cookie attributes.
• Drop support for license_id field in POST /admin/worker/deploy API.
• Support callback service installer for POST /admin/installer API.
• Introduce a new callback-service type for the APIs: POST /admin/worker/deploy, POST /admin/worker/upgrade and GET /admin/worker/upgrade/version.

Further Enhancements

• Improve the performance of gathering materials for the executive report.
• Capability to configure the communication port of MetaDefender Core during deployment.
• Support instance name filtering for processing history exported in STIX/CSV format.
• Include metrics for waiting time related to file type detection in the executive report.

Security Enhancements

Upgraded library for vulnerability fixes:

• OpenSSL 3.5.4

Bug Fixes

• Fixed the issue that led to the disappearance of MetaDefender Core instances from Instance Activity during high load.
• Fixed the issue that led to MetaDefender Core instances losing their licenses after the upgrade.
• Fixed the issue that caused GET /file/{data_id} API to return a zero upload_time.
• Fixed the issue that led to the omission of scan results for files within a batch when a filter was applied.

Version v2.4.0

Release Date: 30 September 2025

Export scan result in JSON format

From MetaDefender Cluster (MD Cluster) Control Center, users can export scan result in JSON format.

Export processing history in STIX or CSV format

Processing history can be exported in STIX or CSV format from MD Cluster Control Center.

Remove abandoned module packages

Abandoned module packages can be selected and removed on web console of Control Center.

Customize the system health check

System administrators can enable the health check option and set the minimum number of required MetaDefender Core instances in the Health Check settings of the MD Cluster Control Center.

RESTful API

• Introduce a new API endpoint in MetaDefender Cluster API Gateway to verity if the system is ready for new scan requests GET /readyz.
• Introduce a new field, dlp_wait_time, in the response of GET /file/{data_id} API requested from MetaDefender Cluster API Gateway.
• Include username field in the response of GET /file/{data_id}, GET /file/batch/{batch_id} and GET /hash/{md5|sha1|sha256|sha512}.

Further Enhancements

• Verify the minimum version requirement when adding a new instance of Redis, RabbitMQ, and PostgreSQL to MetaDefender Cluster Control Center.
• Improve storing scan results from AV engines to MetaDefender Cluster Data Lake.

Security Enhancements

Upgraded library for vulnerability fixes:

• OpenSSL 3.5.2

Bug Fixes

• Fixed the issue that caused occasional service crashes when halted.
• Fixed the issue that made it impossible to close a batch if its name contained special characters.
• Fixed the issue that led to the batch name not appearing in the UI of MD Cluster Control Center.
• Fixed the issue that caused the COO engine to fail or time out during installation.
• Fixed the issue that caused the executive report to eventually miss data.

Known limitations

MetaDefender Core becomes unlicensed following the MD Cluster Worker upgrade.

• If online activation is used, follow Online Activation activate MetaDefender Core again.
• Otherwise, follow Offline Activation.

Version v2.3.0

Release Date: 28 August 2025

Offline License Activation

Offline license activation of MetaDefender Core instances within the cluster is supported for air-gapped environment.

Offline Engine Package Upload

In offline environment, administrators can manually upload engine packages to MetaDefender Cluster Control Center.

Centralized Online Engine Package Update

At update time, engine packages are obtained once from the cloud and shared with all MetaDefender Core instances within the cluster to retrieve, install, or update.

System and Instance Activities

System Activity page allows administrators to track the total processing objects, average CPU usage of the entire system, processed objects and other resources consumed by individual MetaDefender Core instances, all in one place.

High Availability support for PostgreSQL Data Lake

Administrators can add multiple PostgreSQL instances to ensure high availability for Data Lake.

Cancellation of Remote Support Package Gathering

Administrators have the option to cancel the gathering of Remote Support Package from the MetaDefender Cluster console at any point. The cancellation is carried out at the earliest opportunity.

Support Package Gathering within a specified timeframe

MetaDefender Cluster enables administrators to define a time period for gathering support packages.

RESTful API

• Introduce a new API endpoint in MetaDefender Cluster API Gateway to fetch information on the longest expiry active license GET /admin/license.
• Introduce a new field, filetype_wait_time, in the response of GET /file/{data_id} API requested from MetaDefender Cluster API Gateway.

Security Enhancements

Upgraded libraries for vulnerability fixes:

• 7zip 25.01
• Nginx 1.28.0
• PostgreSQL 14.19

Bug Fixes

• Fixed an issue that caused the MetaDefender Cluster Control Center to occasionally crash upon stopping.
• Fixed an issue that caused session timeouts to exceed the configured duration.

Version v2.2.0

Release Date: 30 July 2025

Support adding Redis Caching server with username and password

Administrator can add Redis Caching server including username and password to MetaDefender Cluster.

High Availability support for Redis Caching Server, RabbitMQ Message Broker and MetaDefender Cluster File Storage

Administrators can add multiple instances of Redis, RabbitMQ and MetaDefender Cluster File Storage for High Availability support.

New Dashboard for High Availability support

A new dashboard is designed to show brief information about critical components of MetaDefender Cluster.

Remote Support Package Gathering

A feature to collect support packages remotely by the web console of MetaDefender Cluster Control Center.

RESTful API

• Introduce a new API endpoint in MetaDefender Cluster API Gateway to fetch a list of active MetaDefender Core instances and their details: GET /stat/nodes.
• Introduce a new API endpoint in MetaDefender Cluster API Gateway to fetch a list of active engines and their properties GET /stat/engines.

Security Enhancements

Upgraded libraries for vulnerability fixes:

• Angular v19
• SQLite 3.47.2

Bug Fixes

• Fixed an issue where MetaDefender Cluster API Gateway always responded with HTTP code 500 when clients attempt to call the API GET /hash/{md5|sha1|sha256|sha512} with rule header.
• Fixed an issue that caused MetaDefender Cluster File Storage to peg at 100% CPU in certain cases.
• Fixed an issue that prevented MetaDefender Cluster components from restarting after an upgrade to the newer version on Windows Server 2025.
• Fixed an issue that prevented MetaDefender Cluster File Storage from upgrading to the newer version on Rocky.

Version v2.1.0

Release Date: 03 July 2025

Update product name

Introduce MetaDefender Cluster as the new product name.

RESTful API

• Support include-inprogress header in GET /hash/{md5|sha1|sha256|sha512} to fetch the scan status of the latest request by hash, including incomplete ones.
• Support Content-Encoding header in POST /file.

Further Enhancements

• Turn storage.path key in the ignition file for MetaDefender Cluster File Storage into an optional setting.
• Correct the returned HTTP code when the user signs in to or signs out from MetaDefender Cluster Control Center with the wrong information.
• Correct the returned HTTP code when POST /file is called with wrong API key.

Security Enhancements

Upgraded libraries for vulnerability fixes:

• PostgreSQL v14.18
• yaml-cpp v0.8.0

Bug Fixes

• Fixed an issue where MetaDefender Cluster Control Center can't show scan results of in-progress files on the web console.
• Fixed an issue that caused MetaDefender Cluster API Gateway and MetaDefender Core to be impossible to deploy after a deployment failure.
• Fixed an issue that caused MetaDefender Cluster File Storage to crash while downloading file when DEBUG log is enabled.
• Fixed an issue that caused MetaDefender Cluster File Storage impossible to do data retention with the setting.
• Fixed an issue that caused the MetaDefender Cluster Worker to fail to upgrade due to an engine crash while MetaDefender Core was hosted on the worker.
• Fixed an issue that caused the system administrator to be unable to access the Module page in the MetaDefender Cluster Control Center web console.