CVE-2026-109618 and CVE-2026-109619 (PHP2Shell)
Update3 days agoUnverifiedAdded Oct 23, 2026
Summary PHP2Shell (CVE-2026-109618 and CVE-2026-109619) is an upstream PHP vulnerability. Retool is not affected. PHP does not run on anything internet-facing, nor does it run in our production environments. No action required. What Happened PHP2Shell (CVE-2026-109618 and CVE-2026-109619) is a set of vulnerabilities in PHP.
More Retool releases
Every Retool releaseSelf-hosted Retool 4.34 and 4.0 stable updates
The following patches are now available on the Stable release channel: Retool 4.34.10 Retool 4.0.23 Update your Retool instance to apply the latest bug fixes and security patches.
Retool 4.78 Edge for self-hosted instances
Retool 4.78 is now available on the Edge release channel for self-hosted organizations.
Gemini 4 Argon available in Retool
Live on cloud Gemini 4 Argon is now available in Retool through Google and Google Vertex AI. It is available to Enterprise organizations that bring their own key . Use Gemini 4 Argon with AI resource queries and building apps .
Expanded source control managers for multi-instance releases
Live on cloud Enterprise organizations can now implement multi-instance releases for apps using any supported SCM provider: AWS CodeCommit, Azure Repos, BitBucket, GitHub, and GitLab. To enable multi-instance releases, navigate to Settings > Source control > Edit settings and turn on Enable multi-instance releases .
New AI models available in Retool
Live on cloud Retool now supports the following new AI models: GPT 6.1 Sol through OpenAI for AI resource queries and building apps . Claude Sonnet 5.5 through Anthropic and Amazon Bedrock for AI resource queries and building apps .
Build resource environment switching for published apps
Live on cloud • Team • Business • Enterprise Public beta Organizations on paid plans can prompt the app building agent to use resource environments in published apps.
Self-hosted Retool 4.34 stable updates
The following patches are now available on the Stable release channel: Retool 4.34.9 Update your Retool instance to apply the latest bug fixes and security patches.
Retool 4.74 Edge for self-hosted instances
Retool 4.74 is now available on the Edge release channel for self-hosted organizations.
Also shipped on Oct 21, 2026
Retool in October 20262026.10.09
The voice catalog grows from about 390 to more than 1,400 voices. The 1,035 new voices span all five languages and 29 accents, for use cases from customer service to characters. Browse them in the Studio voice library or read the announcement . Also new in Studio : Preview samples: a voice can have several preview samples, each reading a different sentence.
The AI.CHUNK_DOCUMENT function is a table-valued function that splits unstructured documents into...
The AI.CHUNK_DOCUMENT function is a table-valued function that splits unstructured documents into semantically coherent text chunks optimized for vector embeddings and Retrieval-Augmented Generation (RAG) workflows. This function is generally available (GA).
Automated cataloging and ingestion of Looker (Google Cloud core) metadata with Knowledge Catalog is now...
Automated cataloging and ingestion of Looker (Google Cloud core) metadata with Knowledge Catalog is now generally available (GA). This includes support for additional granular metadata (including dimension/measure definitions, default queries, and relationships) and new asset types: LookML dashboards, LookML dashboard elements, and agents.
Screen MCP tool calls and results for jailbreaks (Beta)
You can now screen MCP tool calls and their results in Unity Gateway for jailbreak and prompt injection attempts. Apply the Jailbreak guardrail on input, output, or both. See Attach a built-in policy .
[Launched] Generally Available: Azure Cosmos DB Safe Key Rotation
Safe Key Rotation for Azure Cosmos DB is now generally available. You can view timestamp metadata showing when each account key was last used, helping you identify active keys before rotating or retiring credentials.This visibility helps reduce the risk o
OpenAI models are coming to Google Cloud
OpenAI frontier models and Codex workflows are now available in Google Cloud's Model Garden via the Google Cloud Marketplace.