Migrating to Consul Connect v1.22.0-rc2
Version v1.22.0-rc2 introduces 1 breaking change. This guide details how to update your code.
Released: 10/15/2025
⚠️ Check Your Code
If you use any of these symbols, you need to read this guide:
Consul KV endpointconsul operator utilizationBreaking Changes
●Issue #1
Key name validation has been added to the key/value endpoint to fix path traversal attacks (CVE-2025-11392). If your existing keys contain characters previously allowed but now invalid, they may fail validation. You can temporarily disable this validation using the `DisableKVKeyValidation` configuration option.
Migration Steps
- 1Review existing key names in the KV store if you encounter validation errors after upgrading, especially if they contain characters previously permitted. If necessary, use the `DisableKVKeyValidation` configuration option as a temporary measure.
Release Summary
This release focuses heavily on security enhancements, addressing several CVEs related to DoS attacks and path traversal via the KV endpoint, and includes a minor fix for the operator utilization command help output.
Need More Details?
View the full release notes and all changes for Consul Connect v1.22.0-rc2.
View Full Changelog