●Change8

Migrating to Consul Connect ent-changelog-1.21.6

Version ent-changelog-1.21.6 introduces 1 breaking change. This guide details how to update your code.

Released: 12/1/2025

1
Breaking Changes
1
Migration Steps
5
Affected Symbols

⚠️ Check Your Code

If you use any of these symbols, you need to read this guide:

/v1/operator/utilizationconsul operator utilizationDisableKVKeyValidationRoute#renderTemplatesend action

Breaking Changes

●Issue #1

Added key name validation on the key/value endpoint. This is enabled by default but can be disabled using the `DisableKVKeyValidation` configuration option to fix path traversal attacks (CVE-2025-11392).

Migration Steps

  1. 1
    If you rely on key names that previously allowed traversal patterns in the KV endpoint, you may need to update your key names or explicitly set `DisableKVKeyValidation` to true in your configuration if the new validation breaks existing workflows (though this is not recommended due to security implications).

Release Summary

This release focuses heavily on security enhancements, including fixes for path traversal and DoS vulnerabilities, alongside significant improvements and modernization within the Consul UI components.

Need More Details?

View the full release notes and all changes for Consul Connect ent-changelog-1.21.6.

View Full Changelog