Skip to main content

Flex Agent release notes

Release date: August 6, 2026

Language versions currently supported: .NET Core, Java, Node.js, PHP, and Python

New and improved:

  • Restrict injectable environment variables to only those within the Contrast namespace. (CFA-565)

  • Force option added to the agent update command allowing re-download of existing agents. (CFA-221)

  • Capture CONTRAST_CONFIG_PATH as part of apps details for diagnostics. (CFA-342)

  • Restrict systemd service writes to only those files and directories required by the Flex Agent. (CFA-439)

  • Improve Application Fingerprint generation to handle more cases. (CFA-230)

  • Improve technology detection and reporting to include version of the detected technologies. (CFA-569)

  • Improve technology detection to account for file handlers added after process start. (CFA-543)

  • The monitor command has been merged with the standard service actions. (CFA-578)

  • The profile command now accounts for OS when determining if a process is suitable for Agent instrumentation. (CFA-595)

  • The profile command now accepts a --pid option to differentiate between processes running the same application. (CFA-600)

  • The apps list command has had UX improvements to better show the relationship between processes. (CFA-598)

  • The system-info command no longer requires an Agent to be present to generate a report. (CFA-579)

  • Improve gRPC pipe generation and management. (CFA-583)

  • Adjust gRPC client timeouts when making calls from the CLI to the Service. (CFA-593)

  • Errors from the gRPC client are now better enumerated. (CFA-605)

  • Honor configuration values set by file for the logger. (CFA-582)

  • The Flex Agent includes these agent versions:

    • .NET Core: 60.1.2

    • Java: 6.33.1

    • Node.js: 5.62.0

    • PHP: 1.54.0

    • Python: 11.7.0

Release date: July 31, 2026

Language versions currently supported: .NET Core, Java, Node.js, PHP, and Python

Note

This release only increments the agents bundled with the Contrast Flex Agent. No changes have been made to the Flex Agent code itself.

New and improved:

  • The Flex Agent includes these agent versions:

    • .NET Core: 60.1.1

    • Java: 6.33.1

    • Node.js: 5.62.0

    • PHP: 1.55.0

    • Python: 11.7.0

Release date: July 30, 2026

Language versions currently supported: .NET Core, Java, Node.js, PHP, and Python

Note

This release only increments the agents bundled with the Contrast Flex Agent. No changes have been made to the Flex Agent code itself.

New and improved:

  • The Flex Agent includes these agent versions:

    • .NET Core: 60.1.1

    • Java: 6.33.0

    • Node.js: 5.62.0

    • PHP: 1.55.0

    • Python: 11.7.0

Release date: June 25, 2026

Language versions currently supported: .NET Core, Java, Node.js, PHP, and Python

New and improved:

  • The Flex Agent is available on Alpine version 3.24. (CFA-554)

  • The Flex Agent now reads its settings from environment variables, similar to other Contrast Agent technologies. (CFA-559)

  • The Flex Agent includes these agent versions:

    • .NET Core: 60.1.0

    • Java: 6.31.0

    • Node.js: 5.61.0

    • PHP: 1.53.0

    • Python: 11.5.0

Release date: June 25, 2026

Language versions currently supported: .NET Core, Java, Node.js, PHP, and Python

New and improved:

  • Updated for bundled agents

  • The Flex Agent includes these agent versions:

    • .NET Core: 60.0.1

    • Java: 6.30.1

    • Node.js: 5.59.0

    • PHP: 1.53.0

    • Python: 11.4.0

Release date: May 28, 2026

Language versions currently supported: .NET Core, Java, Node.js, PHP, and Python

Important

Breaking changes:

Update to use the new .NET agent unified package. This means Flex Agent will be unable to download any .NET agent older than 60.0.0. (CFA-519)

New and improved:

  • Flex Agent now reports process lists to the Agent Dashboard. (CFA-452, CFA-455)

  • Flex Agent enables a Systemd service to facilitate reporting. (CFA-524)

  • Improve Flex Agent system and container usage details. (CFA-515)

  • The Flex Agent includes these agent versions:

    • .NET Core: 60.0.1

    • Java: 6.29.0

    • Node.js: 5.58.0

    • PHP: 1.52.0

    • Python: 11.4.0

Release date: May 19, 2026

Language versions currently supported: .NET Core, Java, Node.js, PHP, and Python

New and improved:

  • Cache comms files ready by the agent attachment tool. (CFA-333)

  • The Flex Agent includes these agent versions:

    • .NET Core: 5.0.8

    • Java: 6.29.0

    • Node.js: 5.56.0

    • PHP: 1.52.0

    • Python: 11.3.0

Bug fixes:

  • When attaching the PHP agent to a process, update PHP_INI_SCAN_DIR to maintain its reading of the default directories set at compile time. (CFA-518)

Release date: May 13, 2026

Language versions currently supported: .NET Core, Java, Node.js, PHP, and Python

New and improved:

  • The Flex Agent is now available for Ubuntu 26.04 - Resolute. (CFA-513)

  • The CLI for the Flex Agent has been updated to better clarify running state and conform to Contrast’s documentation standards. (CFA-425)

  • The Flex Agent includes these agent versions:

    • .NET Core: 5.0.8

    • Java: 6.28.0

    • Node.js: 5.56.0

    • PHP: 1.51.0

    • Python: 11.3.0

Release date: May 7, 2026

Language versions currently supported: .NET Core, Java, Node.js, PHP, and Python

New and improved:

  • Use Rust’s libc crate to get current user rather than getuid C function. (CFA-467)

  • Set the umask on flex-comm and flex-agent directories explicitly rather than relying on the user not changing them after installation. (CFA-446)

  • Write the Flex Agent UUID marker on communications initialization, making it available once any action has executed. (CFA-504)

  • Add a check to the installation script to avoid overwriting the Flex Agent and injector if the same version is reinstalled. (CFA-512)

  • Support Go technology detection. (CFA-498)

  • The Flex Agent includes these agent versions:

    • .NET Core: 5.0.7

    • Java: 6.28.0

    • Node.js: 5.55.0

    • PHP: 1.51.0

    • Python: 11.2.0

Release date: April 29, 2026

Language versions currently supported: .NET Core, Java, Node.js, PHP, and Python

New and improved:

  • If the attach_all_unknown_processes option is used to instrument .NET Core processes, a warning is logged. (CFA-462)

  • On agent download, file permissions are explicitly set, rather than relying on parent directory permissions, to ensure all applications have read access to the agent. (CFA-460)

  • On agent attachment, the Flex Agent provides a Flex UUID & Process Fingerprint for the language Agent to forward to the backend. (CFA-496)

  • The CLI no longer requires root permissions to run; however, it will warn if a non-root user performs an action that may have unexpected results under lower permissions. (CFA-505)

  • The Flex Agent includes these agent versions:

    • .NET Core: 5.0.6

    • Java: 6.28.0

    • Node.js: 5.55.0

    • PHP: 1.51.0

    • Python: 11.2.0

Bug fixes:

  • The buffer used to read comms files did not properly bound the read to ensure a null byte at the end of the read String. (CFA-506)

Release date: April 15, 2026

Language versions currently supported: .NET Core, Java, Node.js, PHP, and Python

New and improved:

  • Previously, the Flex Agent allowed users to disable the integrity check on language agent downloads. That is no longer an optional part of the agent download. (CFA-463)

  • Agent attachment now honors environment variables, in addition to file markers, when deciding if an attempt should be made to attach to a given language. (CFA-474)

  • Expand the details provided by the apps command to show what technologies the application is using. (CFA-475)

  • The Flex Agent includes these agent versions:

    • .NET Core: 5.0.5

    • Java: 6.27.0

    • Node.js: 5.53.1

    • PHP: 1.50.0

    • Python: 11.0.0 – With this major change, Python 3.9 will no longer be supported.

Release date: April 1, 2026

Language versions currently supported: .NET Core, Java, Node.js, PHP, and Python

New and improved:

  • The apps command now includes the PPID in its output.

  • The system-info command now includes the host’s IPs. (CFA-445)

  • The apps command for individual applications now includes Linux proc memory. (CFA-457)

  • The system-info command now includes host memory information and a --full option to report agent and process information. (CFA-454)

  • The AWS CLI is now excluded from attachment logic, no longer instrumented by the Python agent. (CFA-465)

  • All dependencies are now pinned to the exact version rather than the caret version against patches. (CFA-468)

  • The Flex Agent includes these agent versions:

    • .NET Core: 5.0.4

    • Java: 6.27.0

    • Node.js: 5.52.1

    • PHP: 1.50.0

    • Python: 10.26.0

Release date: March 5, 2026

Language versions currently supported: .NET Core, Java, Node.js, PHP, and Python

New and improved:

  • The Flex Agent now runs connection testing to confirm reachability from the host machine to Contrast infrastructures as part of the installation process. (CFA-310)

  • The Flex Agent includes these agent versions:

    • .NET Core: 5.0.2

    • Java: 6.26.0

    • Node.js: 5.52.0

    • PHP: 1.49.0

    • Python: 10.26.0

Bug fixes:

  • The Flex Agent now properly identifies Python processes instrumented by the Python agent when the runner is used, avoiding replacing the directly invoked Python agent. (CFA-434)

Release date: February 13, 2026

Languages supported: .NET Core, Java, Node.js, PHP, and Python

New and improved:

  • The Flex Agent now offers connection testing to confirm reachability from the host machine to Contrast infrastructures. (CFA-394)

  • The Flex Agent includes these agent versions:

    • .NET Core: 5.0.1

    • Java: 6.26.0

    • Node.js: 5.51.0

    • PHP: 1.48.0

    • Python: 10.25.0

Release date: January 28, 2026

Languages supported: .NET Core, Java, Node.js, PHP, and Python

New and improved:

  • The Flex Agent CLI now includes the agent-configcommand that lets you manage agent configuration settings. (CFA-301)

  • The Flex Agent includes these agent versions:

    • .NET Core: 5.0.0

    • Java: 6.25.1

    • Node.js: 5.50.1

    • PHP: 1.48.0

    • Python: 10.23.1

Archive

Release date: December 10, 2025

Languages supported: .NET Core, Java, Node.js, PHP, and Python

New and improved:

  • The Flex Agent now supports Alpine Package Keeper apk-tools 3.0 architecture validation. (CFA-381, CFA-382).

  • The Flex Agent includes these agent versions:

    • .NET Core: 4.8.0

    • Java: 6.23.0

    • Node.js: 5.48.0

    • PHP: 1.47.0

    • Python: 10.22.0

Release date: December 2, 2025

Languages supported: .NET Core, Java, Node.js, PHP, and Python

New and improved:

  • Improved PHP process detection and attachment filtering. (CFA-112)

  • Introduced the beta diagnostics command. (CFA-339)

  • The Flex Agent includes these agent versions:

    • .NET Core: 4.8.0

    • Java: 6.23.0

    • Node.js: 5.47.0

    • PHP: 1.47.0

    • Python: 10.21.0

Release date: November 20, 2025

Languages supported: .NET Core, Java, Node.js, PHP, and Python

New and improved:

  • Improved PHP process detection and attachment filtering. (CFA-112)

  • The Flex Agent includes these agent versions:

    • .NET Core: 4.8.0

    • Java: 6.23.0

    • Node.js: 5.47.0

    • PHP: 1.47.0

    • Python: 10.21.0

Release date: November 5, 2025

Languages supported: .NET Core, Java, Node.js, PHP, and Python

New and improved:

  • Added support for Docker image attachments from the host. (CFA-263)

  • Renamed the service to contrast-flex and removed tbe symlink. (CFA-327)

  • The Flex Agent identifies Kotlin applications as part of the apps command. (CFA-335)

  • The Flex Agent identifies Scala applications as part of the apps command. (CFA-336)

  • The Flex Agent includes these agent versions:

    • .NET Core: 4.6.0

    • Java: 6.22.1

    • Node.js: 5.47.0

    • PHP: 1.46.0

    • Python: 10.18.0

Release date: October 16, 2025

Languages supported: .NET Core, Java, Node.js, PHP, and Python

New and improved:

  • The Flex Agent now generates Alpine Package Keeper (APK) artifacts. (CFA-313)

  • The Flex Agent identifies PHP applications as part of the apps command. (CFA-288)

  • The Flex Agent includes these agent versions:

    • .NET Core: 4.5.2

    • Java: 6.22.0

    • Node.js: 5.45.1

    • PHP: 1.46.0

    • Python: 10.17.0

Release date: September 17, 2025

Languages supported: .NET Core, Java, Node.js, PHP, and Python

New and improved:

  • The Flex Agent now has full support for attaching the PHP agent to applications. (CFA-140)

  • The Flex Agent includes these agent versions:

    • .NET Core: 4.5.1

    • Java: 6.20.1

    • Node.js: 5.42.0

    • PHP: 1.45.0

    • Python: 10.16.0

Release date: September 3, 2025

Languages supported: .NET Core, Java, Node.js, and Python

Beta languages supported: PHP

New and improved:

  • The Flex Agent now has Beta support for attaching the PHP agent to applications. (CFA-141)

  • The Flex Agent now includes an uninstallation script. (CFA-251)

  • The Flex Agent has reduced the size of the bundled .NET Core agent. (CFA-254)

  • The Flex Agent now uses the base maven repo when specifying where to pull the Java agent. (CFA-281)

  • The Flex Agent includes these agent versions:

    • .NET Core: 4.5.1

    • Java: 6.20.1

    • Node.js: 5.42.0

    • PHP: 1.45.0

    • Python: 10.12.0

Bug fixes:

  • Fixed an issue where the REPL wasn't ignored when determining if a Python process should be instrumented,. (CFA-276)

  • Fixed an issue where an extra separator character was added to the PYTHONPATH when attaching to a Python process. (CFA-278 and CFA-278).

Release date: August 12, 2025

Languages supported: .NET Core, Java, Node.js, and Python

New and improved:

  • The Flex Agent includes these agent versions:

    • .NET Core: 4.5.0

    • Java: 6.20.1

    • Node.js: 5.42.0

    • Python: 10.12.0

Bug fixes:

  • Fixed an issue where existing attach settings were overwritten when the agent installed the injector. (CFA-256)

Release date: August 8, 2025

Languages supported: .NET Core, Java, Node.js, and Python

New and improved:

  • The Flex Agent includes these agent versions:

    • .NET Core: 4.5.0

    • Java: 6.20.1

    • Node.js: 5.41.0

    • Python: 10.12.0

Bug fixes:

  • Fixed an issue where the auto-attach command in the script failed to execute when running the installation in unattached mode. (CFA-250)

Release date: August 7, 2025

Languages supported: .NET Core, Java, Node.js, and Python

New and improved:

  • The Flex Agent includes these agent versions:

    • .NET Core: 4.5.0

    • Java: 6.20.1

    • Node.js: 5.41.0

    • Python: 10.12.0

Release date: July 28, 2025

Languages supported: .NET Core, Java, Node.js, and Python

New and improved:

  • When downloading the agents, Flex Agent verifies the file integrity with hashes that public repositories provide. (CFA-196)

  • You can now pin a specific Contrast agent to a specific instrumented process. (CFA-242)

  • You can now specify the maximum allowed agent version for each Contrast agent. (CFA-183)

  • The Flex Agent includes these agent versions:

    • .NET Core: 4.4.5

    • Java: 6.19.0

    • Node.js: 5.40.1

    • Python: 10.11.0

Release date: July 15, 2025

Languages supported: .NET Core, Java, Node.js, and Python

New and improved:

  • First release of the Flex Agent. This agent lets you install multiple Contrast agents for different languages with a single package. It also helps automate the agent update process. You can use an agent wizard for installation or install it manually.

  • The Flex Agent includes these agent versions:

    • .NET Core: 4.4.3

    • Java: 6.19.0

    • Node.js: 5.39.1

    • Python: 10.11.0