We are pleased to announce a new version of the GLPI Agent: 1.19.

Você pode baixá-lo no projeto github do Agente GLPI: https://github.com/glpi-project/glpi-agent/releases/tag/1.19

This new version fixes the following security issues:

• [SECURITY - High] RCE via base folder configuration field in ToolBox (CVE-2026-63375)
• [SECURITY - Medium] RCE via server-controlled archive filename in Deploy (CVE-2026-63444)

The release also includes few bug fixes and enhancements:

• ESET, Wazuh and Clamav antivirus inventory
• Few Acer & Samsung monitors support update
• Network inventory update to support StormShield SNS, Eltex devices with also a better CDP support to detect connected Yealink phones

We also introduce experimental support for coming GLPI 12:

• Enhanced Hyper-V support for VM without agent installed
• Computer network port statistics support on Windows

Você pode verificar os detalhes das alterações no Changelog oficial online disponível aqui: https://github.com/glpi-project/glpi-agent/blob/1.19/Changes

Sobre a embalagem, aqui está o que você deve reter:

• On Windows, GLPI Agent uses Perl 5.44.0, 7-Zip v26.02 and updated building toolchain
• The MacOSX packaging now uses Perl 5.44.0:
  • Minimum MacOSX supported version is now 10.12 in place of 10.10
• The Linux Snap packaging now uses Perl 5.44.0

We strongly encourage you to update your agents.

Você pode baixá-lo no projeto github do Agente GLPI: https://github.com/glpi-project/glpi-agent/releases/tag/1.18

This new version is essentially a security fix release for the following security issues:

• [SECURITY - High] ToolBox plugin can allow unauthenticated path traversal (CVE-2026-40936)
• [SECURITY - High] MySQL and PostgreSQL database inventory command injection (CVE-2026-46615)
• [SECURITY - High] MongoDB database inventory Javascript injection (CVE-2026-45621)
• [SECURITY - High] Command injection via unsecured ToolBox plugin installation (CVE-2026-49285)
• [SECURITY - High] MSSQL database inventory command injection (CVE-2026-52764)
• [SECURITY - High] RCE in ToolBox Remotes page (CVE-2026-TODO)
• [SECURITY - Medium] File injection with Proxy plugin and rarely used configuration (CVE-2026-42187)
• [SECURITY - Medium] Oracle and DB2 database inventory SQL injection (CVE-2026-52765)
• [SECURITY - Medium] Deploy task Path Traversal in Tools::Archive (CVE-2026-52768)
• [SECURITY - Low] XSS on shared fields via unsecured ToolBox plugin installation
• [SECURITY - Low] XSS on credentials fields via unsecured ToolBox plugin installation
• [SECURITY - Low] Server-controlled regex compilation in Collect task
• [SECURITY - Low] Unvalidated process username use during Oracle database inventory

The release also includes few bug fixes:

• NVMe SSD storage disks support on MacOSX
• Lxd containers inventory update on Linux
• Network inventory update to support NetApp, Ubnt and Digi devices
• ToolBox plugin security has been enhanced
• DWService Remote_management inventory support

Você pode verificar os detalhes das alterações no Changelog oficial online disponível aqui: https://github.com/glpi-project/glpi-agent/blob/1.18/Changes

Sobre a embalagem, aqui está o que você deve reter:

• On Windows, GLPI Agent uses Perl 5.42.2, OpenSSL 3.5.7 and updated building toolchain
• The MacOSX packaging now uses Perl 5.42.2 and OpenSSL 3.5.7
• The Linux Snap packaging now uses Perl 5.42.2
• The Linux perl script installer was updated to fix upgrade against nightly build installation

This time, we strongly encourage you to update your agents.

GLPI-Agent 1.17 has been released.

Você pode baixá-lo no projeto github do Agente GLPI: https://github.com/glpi-project/glpi-agent/releases/tag/1.17

This new version comes with some fixes and enhancements and here are the essential ones:

• Proxy server plugin has been enhanced and optimized. It now also works as expected with SSL server plugin.
• SSL server plugin is now supported on windows.
• IEC61850 protocol inventory is also used during netinventory task so collected datas are merged with snmp ones.
• Inventory task includes few fixes and enhancements:
  • Added WithSecure antivirus inventory on MacOSX
  • Updated LiteManager and MeshCentral remote management support
  • Updated PostgreSQL database inventory to support multi-instance on linux
  • Added processes inventory support on windows
  • Enhanced linux users support in linux domain
• NetDiscovery and NetInventory tasks include many updates:
  • New preview feature of PDU type support for future GLPI version
  • Updated Juniper and FortiAP devices support
  • Added many new devices support
  • "contextname" field support for SNMPv3 credentials

Você pode verificar os detalhes das alterações no Changelog oficial online disponível aqui: https://github.com/glpi-project/glpi-agent/blob/1.17/Changes

Sobre a embalagem, aqui está o que você deve reter:

• On Windows, GLPI Agent uses Perl 5.42.1, zlib 1.3.2 and Glpi-AgentMonitor 1.5.0
• The MacOSX packaging now uses Perl 5.42.1 and zlib 1.3.2
• The linux Snap packaging now uses Perl 5.42.1
• The linux perl script installer was updated to fix few issues

Como de costume, convidamos você a atualizar seus agentes para aproveitar essas melhorias.

GLPI Agent 1.16 has been released.

Você pode baixá-lo no projeto github do Agente GLPI: https://github.com/glpi-project/glpi-agent/releases/tag/1.16

New feature : IEC61850 standard support

This new version introduces the inventory of Intelligent Electronic Devices (IED) in GLPI Agent. In practice, we integrated the libiec61850 library support which provides related protocols support and more specifically the ones permitting to retrieve devices state. This integration was exclusively done on NetDiscovery task. Historically, this concerns devices using Operational Technologies (OT devices) - essentially industrial devices. The IEC61850 standard aims to standardized under related technologies to especially guaranty interoperability between devices. GLPI Agent and GLPI will now be able to support the inventory of this kind of devices.

This version comes with many fixes and enhancements and here are the essential ones:

• Windows KeyStore support has been reworked to be more efficient and fix few not supported cases
• OAuth authentication was failing when using a server URL ending with "/front/inventory.php". The problem is fixed.
• Automatic inventory includes a lot of fixes:
  • many are related to antivirus inventory on windows or linux: DrWeb, Karpersky, Trellix, ESET
  • few new remote management support has been added: RuDesktop, SimpleHelp
  • HP G5 Dock Station serial number is now correct
• A RemoteInventory possible crash case has been fixed
• With the IEC61850 netdiscovery task integration, many new networking devices are now supported by network inventory
• And finally, we have improved the SNMPv3 protocol support to allow latest security standards usages

Você pode verificar os detalhes das alterações no Changelog oficial online disponível aqui: https://github.com/glpi-project/glpi-agent/blob/1.16/Changes

Sobre a embalagem, aqui está o que você deve reter:

• On Windows, GLPI Agent uses Perl 5.42.0, OpenSSL 3.5.5, dmidecode 3.7 and Glpi-AgentMonitor 1.4.2
• The MacOSX packaging now uses Perl 5.42.0 and OpenSSL 3.5.5
• The linux Snap packaging now uses Perl 5.42.0
• For IEC61850 protocol support, we have included many packaging solutions to embed a Perl API with a static version of the libiec61850 v1.6.1 library for windows and linux packaging (Snap, debian and rpm)

Como de costume, convidamos você a atualizar seus agentes para aproveitar essas melhorias.

Parabéns! Temos o prazer de anunciar nosso novo parceiro Silver da Rede GLPI no Brasil: Engemon TI

A Engemon IT se destaca como uma parceira estratégica, focada em compreender as necessidades de negócio e culturais de seus clientes. Com um portfólio abrangente de hardware, software e serviços, a empresa oferece soluções personalizadas em infraestrutura e inovação, atendendo desde o usuário final até as camadas mais avançadas, tudo apoiado por um sólido ecossistema de parcerias globais com fabricantes, agentes de inovação e instituições financeiras.

Site https://engemon.com.br/engemon-it-pt/

We are excited to see GLPI ITSM expanding internationally and helping more clients through our GLPI Network offering, whether it’s on-premise or in Cloud. Our new partners play a key role in making these services more accessible and ensuring high-quality support.

Ser parceiro significa:

• Aproveitando descontos especiais
• Acessando o suporte oficial
• Ter um contato privilegiado com um Channel Manager para adquirir mais clientes e impulsionar sua reputação no mercado de ITSM Open Source

Se você gostaria de representar e implantar o GLPI em seu país, entre em contato conosco: https://www.glpi-project.org/en/contact/

Fique conectado! Siga-nos nas nossas redes sociais!

O Agente GLPI 1.15 foi lançado.

Temos orgulho de anunciar que esta nova versão vem com um pacote MSI do Windows assinado e binários do Windows assinados.

Você pode baixá-lo no projeto github do Agente GLPI: https://github.com/glpi-project/glpi-agent/releases/tag/1.15

Esta versão vem com algumas correções e melhorias. Aqui estão as essenciais:

• Agent deviceid will be updated on startup if assetname-support option or even hostname changes
• Fixed “No Valid Agentid set on HTTP Client” error during ToolBox remote inventory tasks run
• Fixed CrowdStrike Falcon AV support on linux
• Fixed TeamViewer ID remote management inventory on linux
• Added support for Astra Linux distribution inventory
• Fixed MSSQL database inventory
• Also support inventory task event for server target if not partial
• Fixed virtualmachine type for linux Hyper-V VMs
• Fixed fqdn support on linux
• Fixed one possible perl error during ESX inventory
• Fixed glpi-injector when submitting a json inventory from stdin
• Added Digipower PDUs SNMP Support

Sobre a embalagem, aqui está o que você deve reter:

• Windows MSI installer and windows binaries are now signed
• On Windows, Perl is built using a patched 5.40.2 version including a patch fixing perl CVE-2025-40909. It uses now OpenSSL 3.5.0, libxml2 library v2.14.3, GLPI-AgentMonitor 1.4.1 and dmidecode 3.6-update-1. Also Perl locale support has been disabled as not used.
• The MacOSX packaging now uses OpenSSL 3.5.0.

Você pode verificar os detalhes das alterações no Changelog oficial online disponível aqui: https://github.com/glpi-project/glpi-agent/blob/1.15/Changes

Como de costume, convidamos você a atualizar seus agentes para aproveitar essas melhorias.

Fique conectado! Siga-nos nas nossas redes sociais!

We are pleased to announce that GLPI Agent 1.14 is now available — update now!

You can download it from the official project page on GitHub: https://github.com/glpi-project/glpi-agent/releases/tag/1.14

This version brings a few fixes and improvements, including:

• We have a new minor fix related to task triggering from the local HTTP interface
• SNMP inventory now supports advanced configuration which can be used to inventory Snom IP phones
• MS Defender antivirus detection is fixed on Windows Server
• Inventory of Crowdstrike Falcon antivirus has been added for Windows, Linux, and MacOSX
• We fixed the MS Store inventory when software still appears installed for a deleted user
• PostgreSQL database inventory has been fixed for Windows
• We also improved network inventory for HP printers and storage, Netgear stacked devices, Dell EMC devices, Katusha printers, and Quantum Linux appliances
• The Collect task now supports retrieval of REG_MULTI_SZ type registry keys

Regarding packages, here are the highlights:

• On Windows, Perl is now compiled with version 5.40.2 (patched), msys2-base 20250221, and libxml2 v2.14.1
• The MacOSX package now uses Perl v5.40.2

You can review the full changelog in the official Changelog available online here: https://github.com/glpi-project/glpi-agent/blob/1.14/Changes

We recommend updating your agents to take advantage of these improvements.

Stay connected! Follow us on social media so you don’t miss any updates!

Download GLPI Agent 1.13 Now!

You can download it from the official project page on GitHub: https://github.com/glpi-project/glpi-agent/releases/tag/1.13

This version brings a few fixes and improvements, including:

• We fixed a regression introduced in 1.12 where the Deploy task was no longer executed when triggered from the local HTTP interface
• On first contact with a GLPI 10+ server, the GLPI agent will now also send supported tasks
• On systems where a proxy is defined by environment variables, you can now set proxy to none to not use this proxy system configuration
• We introduced a new required-category setting to help use GLPI business rules when full inventory reporting is enabled. This forces inclusion of a category in partial inventory even if content has not changed.
• We added itemtype e esx-itemtype configurations if the server supports generic asset types like GLPI 11+ will
• MS Defender and SentinelOne antivirus are now inventoried on Windows Server
• HP printer wifi ports are now recognized as wireless
• Improved support for FortiSwitch and TP-Link Omada network devices

Regarding packages, here's what to note:

• The Windows MSI installer wrongly suggested that Usuário e password were for proxy authentication; we corrected this and clarified the corresponding installer window to show they are for basic HTTP authentication, a common method supported by GLPI-Network Cloud
• The corrected MSI installer window now also allows setting OAuth id and secret if the server supports OAuth authentication like GLPI 11+ will
• On Windows, Perl is now compiled in version 5.40.1 with OpenSSL v3.4.1 support, msys2-base 20241208, libxml2 library v2.13.6 and dmidecode 3.6
• The MacOSX package now uses Perl v5.40.1 and OpenSSL v3.4.1

You can check the full list of changes in the official Changelog available here: https://github.com/glpi-project/glpi-agent/blob/1.13/Changes

As usual, we recommend updating your agents to take advantage of these improvements.

Stay connected! Follow us on social media to never miss an update!