LoginSign Up
← Back to all sparks
C

Camunda

PM
Velocity5.0

Process orchestration and workflow automation platform

camunda.com ↗

Camunda patches Optimize 8.6 and 8.7 for a root CA CVE while 8.11 alpha settles.

workflow-automationbpmnsecurity-patchescluster-operationsorchestration
◆Current state
Camunda released 8.11.0-alpha1 on November 2 with cluster secrets in managed mode, a public cluster upgrade API and variable metadata on process instance creation across gRPC, REST and MCP. Since then the feed is Optimize maintenance: 8.6.29 and 8.7.31 distrust the emSign Root CA G1 (CVE-2026-114820), and 8.6.29 also stops double gzip decoding in the OpenSearch client.
◆Where it's heading
Feature work sits on the 8.11 alpha line, while older Optimize lines get steady security patches. The alpha points toward more cluster management through public APIs.
◆Prediction
Expect an 8.11.0-alpha2 extending the cluster API, with Optimize patch builds continuing on 8.6 and 8.7.

◆Recent moves

  1. 7d ago

    Camunda Optimize 8.7.31 distrusts emSign Root CA G1

    An Optimize patch that removes trust in a compromised root certificate (CVE-2026-114820) and bumps Zeebe and Identity. Security maintenance on the 8.7 line.

    View source ↗
  2. 8d ago

    Camunda Optimize 8.6.29 patches root CA trust and OpenSearch

    Optimize 8.6 gets the same root CA distrust fix plus an OpenSearch client fix for double gzip decoding. Routine patching for an older line.

    View source ↗
  3. 11d ago

    Camunda 8.11 alpha 1 adds cluster secrets and upgrade API

    The first 8.11 alpha brings cluster secrets in managed mode, a public cluster upgrade API and typed per-index shard settings, setting the operational direction for the cycle.

    View source ↗
  4. 14d ago

    Camunda Optimize 8.6.28 patch build

    A tag-only Optimize patch build for the 8.6 line with no user-facing notes.

    View source ↗
  5. 17d ago

    Camunda 8.11 alpha RC2 adds variable metadata across APIs

    The second release candidate accepts variable metadata when creating process instances over gRPC, REST and MCP, keeping the MCP surface on par with the standard APIs.

    View source ↗
  6. 18d ago

    Camunda 8.11 alpha RC1 previews cluster management APIs

    The first 8.11 alpha candidate previews cluster secrets, upgrade checks and shard configuration that later shipped in alpha 1.

    View source ↗