We released an updated version of the Apigee hybrid software, v1.14.4

## Announcement Announcement ### v1.14.4 On April 27, 2026 we released an updated version of the Apigee hybrid software, v1.14.4. * For information on upgrading, see [Upgrading Apigee hybrid to version v1.14.4](https://cloud.google.com/apigee/docs/hybrid/v1.14/upgrade). * For information on new installations, see [The big picture](https://cloud.google.com/apigee/docs/hybrid/v1.14/big-picture). **Note:** This is a patch release: The container images used in patch releases are integrated with the Apigee hybrid Helm charts. Upgrading to a patch via the Helm chart automatically updates the images. No manual image changes are typically needed. For information on container image support in Apigee hybrid releases, see [Apigee release process](https://cloud.google.com/apigee/docs/release/apigee-release-process#apigee-hybrid-container-images). ## Feature Feature **Sidecar authentication for Workload Identity Federation on non-GKE platforms** Starting in version v1.14.4, you can now use a sidecar along with Workload Identity Federation on non-GKE platforms to mount security tokens from your preferred identity provider (IDP) for service account authentication. See [Use sidecar authentication for Workload Identity Federation on non-GKE platforms](https://cloud.google.com/apigee/docs/hybrid/v1.14/use-sidecar-for-wif). ## Security Security | Bug ID | Description | | --------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | **471527485, 471173296, 471172082, 471171833** | **Security fixes for apigee-synchronizer.** This addresses the following vulnerabilities: [CVE-2025-55163](https://nvd.nist.gov/vuln/detail/CVE-2025-55163) [CVE-2025-58056](https://nvd.nist.gov/vuln/detail/CVE-2025-58056) [CVE-2025-58057](https://nvd.nist.gov/vuln/detail/CVE-2025-58057) [CVE-2025-67735](https://nvd.nist.gov/vuln/detail/CVE-2025-67735) | | **471290390, 471199955, 471197958, 470990914** | **Security fixes for apigee-runtime.** This addresses the following vulnerabilities: [CVE-2025-55163](https://nvd.nist.gov/vuln/detail/CVE-2025-55163) [CVE-2025-58056](https://nvd.nist.gov/vuln/detail/CVE-2025-58056) [CVE-2025-58057](https://nvd.nist.gov/vuln/detail/CVE-2025-58057) [CVE-2025-67735](https://nvd.nist.gov/vuln/detail/CVE-2025-67735) | | **470992132, 470991089, 470989623, 470989232, 470988977** | **Security fixes for apigee-mart-server.** This addresses the following vulnerabilities: [CVE-2025-48924](https://nvd.nist.gov/vuln/detail/CVE-2025-48924) [CVE-2025-55163](https://nvd.nist.gov/vuln/detail/CVE-2025-55163) [CVE-2025-58056](https://nvd.nist.gov/vuln/detail/CVE-2025-58056) [CVE-2025-58057](https://nvd.nist.gov/vuln/detail/CVE-2025-58057) [CVE-2025-67735](https://nvd.nist.gov/vuln/detail/CVE-2025-67735) | | **470953507, 470953254, 470952893** | **Security fixes for apigee-hybrid-cassandra.** This addresses the following vulnerabilities: [CVE-2022-40897](https://nvd.nist.gov/vuln/detail/CVE-2022-40897) [CVE-2023-2976](https://nvd.nist.gov/vuln/detail/CVE-2023-2976) [CVE-2025-47273](https://nvd.nist.gov/vuln/detail/CVE-2025-47273) | | **451224723, 451224123** | **Security fixes for apigee-fluent-bit.** This addresses the following vulnerabilities: [CVE-2010-4756](https://nvd.nist.gov/vuln/detail/CVE-2010-4756) [CVE-2011-3389](https://nvd.nist.gov/vuln/detail/CVE-2011-3389) [CVE-2013-4392](https://nvd.nist.gov/vuln/detail/CVE-2013-4392) [CVE-2015-3276](https://nvd.nist.gov/vuln/detail/CVE-2015-3276) [CVE-2017-14159](https://nvd.nist.gov/vuln/detail/CVE-2017-14159) [CVE-2017-17740](https://nvd.nist.gov/vuln/detail/CVE-2017-17740) [CVE-2018-20796](https://nvd.nist.gov/vuln/detail/CVE-2018-20796) [CVE-2018-5709](https://nvd.nist.gov/vuln/detail/CVE-2018-5709) [CVE-2018-6829](https://nvd.nist.gov/vuln/detail/CVE-2018-6829) [CVE-2019-1010022](https://nvd.nist.gov/vuln/detail/CVE-2019-1010022) [CVE-2019-1010023](https://nvd.nist.gov/vuln/detail/CVE-2019-1010023) [CVE-2019-1010024](https://nvd.nist.gov/vuln/detail/CVE-2019-1010024) [CVE-2019-1010025](https://nvd.nist.gov/vuln/detail/CVE-2019-1010025) [CVE-2019-9192](https://nvd.nist.gov/vuln/detail/CVE-2019-9192) [CVE-2020-15719](https://nvd.nist.gov/vuln/detail/CVE-2020-15719) [CVE-2022-27943](https://nvd.nist.gov/vuln/detail/CVE-2022-27943) [CVE-2023-2953](https://nvd.nist.gov/vuln/detail/CVE-2023-2953) [CVE-2023-31437](https://nvd.nist.gov/vuln/detail/CVE-2023-31437) [CVE-2023-31438](https://nvd.nist.gov/vuln/detail/CVE-2023-31438) [CVE-2023-31439](https://nvd.nist.gov/vuln/detail/CVE-2023-31439) [CVE-2023-45853](https://nvd.nist.gov/vuln/detail/CVE-2023-45853) [CVE-2024-2236](https://nvd.nist.gov/vuln/detail/CVE-2024-2236) [CVE-2024-2379](https://nvd.nist.gov/vuln/detail/CVE-2024-2379) [CVE-2024-26458](https://nvd.nist.gov/vuln/detail/CVE-2024-26458) [CVE-2024-26461](https://nvd.nist.gov/vuln/detail/CVE-2024-26461) [CVE-2025-0725](https://nvd.nist.gov/vuln/detail/CVE-2025-0725) [CVE-2025-10148](https://nvd.nist.gov/vuln/detail/CVE-2025-10148) [CVE-2025-27587](https://nvd.nist.gov/vuln/detail/CVE-2025-27587) [CVE-2025-62813](https://nvd.nist.gov/vuln/detail/CVE-2025-62813) [CVE-2025-9086](https://nvd.nist.gov/vuln/detail/CVE-2025-9086) [CVE-2025-9230](https://nvd.nist.gov/vuln/detail/CVE-2025-9230) [CVE-2025-9232](https://nvd.nist.gov/vuln/detail/CVE-2025-9232) | | **N/A** | **Security fixes for apigee-asm-ingress.** This addresses the following vulnerabilities: [CVE-2026-4437](https://nvd.nist.gov/vuln/detail/CVE-2026-4437) [CVE-2026-4046](https://nvd.nist.gov/vuln/detail/CVE-2026-4046) [CVE-2026-34040](https://nvd.nist.gov/vuln/detail/CVE-2026-34040) [CVE-2026-33186](https://nvd.nist.gov/vuln/detail/CVE-2026-33186) [CVE-2026-24051](https://nvd.nist.gov/vuln/detail/CVE-2026-24051) [CVE-2025-15558](https://nvd.nist.gov/vuln/detail/CVE-2025-15558) | | **N/A** | **Security fixes for apigee-asm-istiod.** This addresses the following vulnerabilities: [CVE-2026-34040](https://nvd.nist.gov/vuln/detail/CVE-2026-34040) [CVE-2026-33186](https://nvd.nist.gov/vuln/detail/CVE-2026-33186) [CVE-2026-24051](https://nvd.nist.gov/vuln/detail/CVE-2026-24051) [CVE-2025-15558](https://nvd.nist.gov/vuln/detail/CVE-2025-15558) | | **N/A** | **Security fixes for apigee-connect-agent.** This addresses the following vulnerabilities: [CVE-2026-33186](https://nvd.nist.gov/vuln/detail/CVE-2026-33186) [CVE-2025-68121](https://nvd.nist.gov/vuln/detail/CVE-2025-68121) [CVE-2025-68119](https://nvd.nist.gov/vuln/detail/CVE-2025-68119) [CVE-2025-61732](https://nvd.nist.gov/vuln/detail/CVE-2025-61732) [CVE-2025-61731](https://nvd.nist.gov/vuln/detail/CVE-2025-61731) [CVE-2025-61729](https://nvd.nist.gov/vuln/detail/CVE-2025-61729) [CVE-2025-61726](https://nvd.nist.gov/vuln/detail/CVE-2025-61726) [CVE-2025-4674](https://nvd.nist.gov/vuln/detail/CVE-2025-4674) | | **N/A** | **Security fixes for apigee-envoy.** This addresses the following vulnerabilities: [CVE-2026-4437](https://nvd.nist.gov/vuln/detail/CVE-2026-4437) [CVE-2026-4046](https://nvd.nist.gov/vuln/detail/CVE-2026-4046) | | **N/A** | **Security fixes for apigee-hybrid-cassandra-client.** This addresses the following vulnerabilities: [CVE-2026-33186](https://nvd.nist.gov/vuln/detail/CVE-2026-33186) [CVE-2026-24051](https://nvd.nist.gov/vuln/detail/CVE-2026-24051) [CVE-2025-47907](https://nvd.nist.gov/vuln/detail/CVE-2025-47907) [CVE-2025-4674](https://nvd.nist.gov/vuln/detail/CVE-2025-4674) | | **N/A** | **Security fixes for apigee-kube-rbac-proxy.** This addresses the following vulnerabilities: [CVE-2026-24051](https://nvd.nist.gov/vuln/detail/CVE-2026-24051) [CVE-2025-61729](https://nvd.nist.gov/vuln/detail/CVE-2025-61729) [CVE-2025-61723](https://nvd.nist.gov/vuln/detail/CVE-2025-61723) [CVE-2025-58188](https://nvd.nist.gov/vuln/detail/CVE-2025-58188) [CVE-2025-58187](https://nvd.nist.gov/vuln/detail/CVE-2025-58187) [CVE-2026-33186](https://nvd.nist.gov/vuln/detail/CVE-2026-33186) | | **N/A** | **Security fixes for apigee-mint-task-scheduler.** This addresses the following vulnerabilities: [CVE-2026-33871](https://nvd.nist.gov/vuln/detail/CVE-2026-33871) [CVE-2026-33870](https://nvd.nist.gov/vuln/detail/CVE-2026-33870) | | **N/A** | **Security fixes for apigee-open-telemetry-collector.** This addresses the following vulnerabilities: [CVE-2026-34040](https://nvd.nist.gov/vuln/detail/CVE-2026-34040) [CVE-2026-33186](https://nvd.nist.gov/vuln/detail/CVE-2026-33186) [CVE-2026-32287](https://nvd.nist.gov/vuln/detail/CVE-2026-32287) [CVE-2026-24051](https://nvd.nist.gov/vuln/detail/CVE-2026-24051) | | **N/A** | **Security fixes for apigee-operators.** This addresses the following vulnerability: [CVE-2026-33186](https://nvd.nist.gov/vuln/detail/CVE-2026-33186) | | **N/A** | **Security fixes for apigee-prom-prometheus.** This addresses the following vulnerabilities: [CVE-2026-34040](https://nvd.nist.gov/vuln/detail/CVE-2026-34040) [CVE-2026-33186](https://nvd.nist.gov/vuln/detail/CVE-2026-33186) [CVE-2026-24051](https://nvd.nist.gov/vuln/detail/CVE-2026-24051) | | **N/A** | **Security fixes for apigee-prometheus-adapter.** This addresses the following vulnerabilities: [CVE-2026-33186](https://nvd.nist.gov/vuln/detail/CVE-2026-33186) [CVE-2026-24051](https://nvd.nist.gov/vuln/detail/CVE-2026-24051) | | **N/A** | **Security fixes for apigee-redis.** This addresses the following vulnerabilities: [CVE-2025-32023](https://nvd.nist.gov/vuln/detail/CVE-2025-32023) [CVE-2025-68119](https://nvd.nist.gov/vuln/detail/CVE-2025-68119) [CVE-2025-61732](https://nvd.nist.gov/vuln/detail/CVE-2025-61732) [CVE-2025-61731](https://nvd.nist.gov/vuln/detail/CVE-2025-61731) [CVE-2025-61726](https://nvd.nist.gov/vuln/detail/CVE-2025-61726) [CVE-2025-47907](https://nvd.nist.gov/vuln/detail/CVE-2025-47907) [CVE-2025-4674](https://nvd.nist.gov/vuln/detail/CVE-2025-4674) | | **N/A** | **Security fixes for apigee-stackdriver-logging-agent.** This addresses the following vulnerabilities: [CVE-2026-33176](https://nvd.nist.gov/vuln/detail/CVE-2026-33176) [CVE-2025-61594](https://nvd.nist.gov/vuln/detail/CVE-2025-61594) [CVE-2025-24294](https://nvd.nist.gov/vuln/detail/CVE-2025-24294) [CVE-2023-33953](https://nvd.nist.gov/vuln/detail/CVE-2023-33953) [CVE-2022-32511](https://nvd.nist.gov/vuln/detail/CVE-2022-32511) [CVE-2022-29181](https://nvd.nist.gov/vuln/detail/CVE-2022-29181) [CVE-2022-24839](https://nvd.nist.gov/vuln/detail/CVE-2022-24839) [CVE-2022-24836](https://nvd.nist.gov/vuln/detail/CVE-2022-24836) [CVE-2022-0759](https://nvd.nist.gov/vuln/detail/CVE-2022-0759) [CVE-2021-41817](https://nvd.nist.gov/vuln/detail/CVE-2021-41817) [CVE-2021-31799](https://nvd.nist.gov/vuln/detail/CVE-2021-31799) [CVE-2021-30560](https://nvd.nist.gov/vuln/detail/CVE-2021-30560) [CVE-2021-28965](https://nvd.nist.gov/vuln/detail/CVE-2021-28965) [CVE-2021-23214](https://nvd.nist.gov/vuln/detail/CVE-2021-23214) [CVE-2020-25695](https://nvd.nist.gov/vuln/detail/CVE-2020-25695) [CVE-2020-25694](https://nvd.nist.gov/vuln/detail/CVE-2020-25694) [CVE-2020-25613](https://nvd.nist.gov/vuln/detail/CVE-2020-25613) [CVE-2019-3881](https://nvd.nist.gov/vuln/detail/CVE-2019-3881) [CVE-2018-25032](https://nvd.nist.gov/vuln/detail/CVE-2018-25032) [CVE-2018-1115](https://nvd.nist.gov/vuln/detail/CVE-2018-1115) [CVE-2018-10915](https://nvd.nist.gov/vuln/detail/CVE-2018-10915) [CVE-2018-1058](https://nvd.nist.gov/vuln/detail/CVE-2018-1058) [CVE-2018-1053](https://nvd.nist.gov/vuln/detail/CVE-2018-1053) [CVE-2017-7546](https://nvd.nist.gov/vuln/detail/CVE-2017-7546) [CVE-2017-7484](https://nvd.nist.gov/vuln/detail/CVE-2017-7484) [CVE-2017-15098](https://nvd.nist.gov/vuln/detail/CVE-2017-15098) [CVE-2017-14798](https://nvd.nist.gov/vuln/detail/CVE-2017-14798) [CVE-2016-7954](https://nvd.nist.gov/vuln/detail/CVE-2016-7954) [CVE-2016-7048](https://nvd.nist.gov/vuln/detail/CVE-2016-7048) [CVE-2016-5424](https://nvd.nist.gov/vuln/detail/CVE-2016-5424) [CVE-2016-5423](https://nvd.nist.gov/vuln/detail/CVE-2016-5423) [CVE-2016-0766](https://nvd.nist.gov/vuln/detail/CVE-2016-0766) [CVE-2015-3167](https://nvd.nist.gov/vuln/detail/CVE-2015-3167) [CVE-2015-3166](https://nvd.nist.gov/vuln/detail/CVE-2015-3166) [CVE-2015-0244](https://nvd.nist.gov/vuln/detail/CVE-2015-0244) [CVE-2015-0243](https://nvd.nist.gov/vuln/detail/CVE-2015-0243) [CVE-2015-0241](https://nvd.nist.gov/vuln/detail/CVE-2015-0241) | | **N/A** | **Security fixes for apigee-udca.** This addresses the following vulnerabilities: [CVE-2026-33186](https://nvd.nist.gov/vuln/detail/CVE-2026-33186) [CVE-2026-24051](https://nvd.nist.gov/vuln/detail/CVE-2026-24051) [CVE-2025-68119](https://nvd.nist.gov/vuln/detail/CVE-2025-68119) [CVE-2025-61731](https://nvd.nist.gov/vuln/detail/CVE-2025-61731) [CVE-2025-61729](https://nvd.nist.gov/vuln/detail/CVE-2025-61729) [CVE-2025-61726](https://nvd.nist.gov/vuln/detail/CVE-2025-61726) [CVE-2025-61723](https://nvd.nist.gov/vuln/detail/CVE-2025-61723) [CVE-2025-58188](https://nvd.nist.gov/vuln/detail/CVE-2025-58188) [CVE-2025-58187](https://nvd.nist.gov/vuln/detail/CVE-2025-58187) | | **N/A** | **Security fixes for apigee-watcher.** This addresses the following vulnerability: [CVE-2026-33186](https://nvd.nist.gov/vuln/detail/CVE-2026-33186) |