Litmus Edge 4.0.8

release date march 19, 2026 review the current list of limitations docid\ eax yfkpggsv lhc4um5u the litmus edge docker image tags for this release are 4 0 8 amd64 litmusedge azurecr io/litmusedge std docker 4 0 8 amd64 4 0 8 arm64 litmusedge azurecr io/litmusedge std docker 4 0 8 arm64 new features description devicehub this release introduces the following drivers automationdirect ebc ethernet this new driver is experimental cutler hammer new elc gen2 drivers for improved connectivity to elc controllers cutler hammer elc ethernet cutler hammer elc serial ge fanuc ge fanuc rx3i serial (gen1 3) connects to ge fanuc rx3i plcs over serial communication opto devices opto22 cont protocol ethernet supports string read/write and better handling of pointer tags siemens s5 ethernet gen2 driver connects to siemens s5 plcs over ethernet datahub the new edge cascading v2 feature allows you to link multiple litmus edge instances across ot, dmz, and it layers to securely route stream data between isa‑95 or network layers edge cascading v2 also offers simple hub/spoke configuration in ui configure each edge as hub, spoke, or both directly in the ui with options for accounts, streams, and per‑link topic allowed‑lists token‑based secure connections use generated account tokens to authenticate spokes to hubs with tls support to secure traffic end‑to‑end built‑in observability and reliability view cascading status and message broker logs in the ui analytics a new analytics ui introduces improved usability and development tools modernized ui with full screen mode canvas and toolbars have been fully redesigned for a cleaner, more intuitive experience includes support for dark mode new interactive playground test, write, and validate javascript, tengo script, and jsonata processors in real time before deploying them improved debugging windows redesigned debug and message windows provide clearer context to help you troubleshoot more efficiently flexible ui adoption instantly switch between the new and classic analytics ui integration added a new mqtt aws iot core gen 2 connector that enables a secure mqtt communication with aws iot core via mqtt added a new mqtt aws iot sitewise edge gen 2 connector based on the latest connector v2 architecture this enables secure mqtt communication with aws iot sitewise mqtt broker added a new azure iot hub using sas key over ssl gen 2 connector based on the latest connector v2 architecture this enables secure mqtt communication with azure iot hub gen 2 connector system granular privileged container control control which users can launch docker containers in privileged mode with the new modifyprivileged privilege grant users the rights they need for templates, backups, restores, and upgrades without granting full system access find the new privilege under marketplace in system > access control > manage role > edit enhancements and improvements description devicehub improved the devicehub tag browsing experience with better default layouts, clearer columns, and new task controls (including start/stop and delete confirmation) for easier task management mitsubishi added support to mitsubishi fx3g binary ethernet (gen1 3) driver for additional registers x , y , m , t , c , sm , s , r , sd , d , cv , cv2 , tv string file registers dsh/dsl and rsh/rsl bit, word, dword, float, and string types odva improved the cip ethernet driver’s browsing so that assemblies, such as specific instances in assembly class 04, are now correctly discovered and accessible opc ua improved opc ua advanced driver browsing by adding a default root browse parameter (with a recommended default) and simplifying related device settings siemens siemens ti505 ethernet (gen1 3) extended support for wx , wy , c/cr , v , k , tcp/tcc , stw , dsp/dsc , dcp/dcc registers includes bit and string register variants broader address range and data type coverage toyopuc the toyopuc ethernet driver was renamed to toyopuc ethernet the toyopuc ethernet (renamed ) and keyence nano ethernet drivers are improved with expanded device and protocol support improvements include array read/write for all register types improved byte order and string handling (unicode and shift jis support) multi point reads and fl net linking (up to four layers) new max request size setting for performance tuning added write response topic support for allen‑bradley, emerson roc/fb107, emerson dnp3, mitsubishi, modbus, omron, siemens, mqtt client, generator, and snmp manager drivers improved the devicehub rest driver so it can correctly parse json responses even when the content type header is missing or set to an unknown value this ensures that array values are read reliably introduced a new event when the system fails to start a device implemented lazy loading of devices in the background digital twins added support to export json schemas for digital twin instances updated the syntax for digital twin system variables in transformations and static attributes to use {edge dt system time} , {edge dt model version} , and {edge dt model name} datahub improved opc ua client advanced browse performance in datahub large address spaces now load significantly faster when discovering nodes analytics improved the analytics processor copy and paste experience in the new analytics ui now you can predictably paste processors where you want on the canvas improved analytics scripting playground (javascript, tengo, and jsonata) with a full screen code editor and resizable input and output panels to make it easier to develop scripts enhanced the analytics inject processor to support scheduling payload injections at specific times on selected days of the week, enabling more precise and flexible automation applications images with repository or tag values defined as \<none> now display in applications > images this matches the behavior in docker and provides you with an accurate view of the number of images in your environment integration added an optional create topic setting to the kafka gen 2 connector so it can automatically create missing topics when enabled this matches the behavior previously available in kafka v1 system new events are available in system > events that capture whether templates are applied successfully, whether backups were successful, and when an edge device reboots oidc authenticated users are automatically added to the viewers group on first login you can modify group membership afterward without changing oidc provider settings litmus edge proxy urls now persist when performing a backup and restore or when including proxy in a template download two factor authentication (2fa) now supports accounts authenticated through ldap, ad, and oauth in addition to local users the groups field is now required when adding or modifying an oidc provider through the api to match the behavior in the ui improvements have been made to the proxy configuration page addressed the following vulnerability related to zerotouch installations cve 2025 61729 high availability high availability now includes auth and dm database backups and provides usability improvements including messaging on why backup nodes became active, timestamps for backups, and error details on the last failed sync note that this feature remains as a beta version resolved issues description devicehub resolved an issue where the devicename value was incorrectly masking special characters to (underscore) from the payloads published on devicehub plcstatus > and system events topics fixed an issue with the ab compactlogix ethernet advanced driver where tags newly added in logix designer were not appearing in new browse jobs fixed an issue where configuring extremely large polling intervals for certain drivers could cause abnormally high cpu usage very large polling intervals are now handled safely fixed a devicehub bug that prevented adding c/t/d bit tags to devices fixed a panic error in the torque tool open protocol ethernet driver that caused connections to be rejected when reading torque data datahub fixed tls certificate issue that occurred when initially adding a tls enabled stream to a spoke during edge cascading setup applications fixed issue where a running container could be stopped before the new image is fully downloaded when upgrading an app from litmus edge manager fixed issue where a container crashed with an exited 1 code, and a container deleted event was generated even though the container was visible and not deleted fixed an issue where volumes were deleted and recreated during an application upgrade resulting in data loss analytics fixed an issue in the analytics tengo script processor where globals variableget() could not correctly read json and array values using nested paths, ensuring json based variables now resolve as expected integration fixed an issue where inbound subscriptions with dashes ( ) in the local topic name were incorrectly converted to underscores ( ) topics now preserve dashes as expected fixed issue where influxdb connector with empty remote topic for outbound subscriptions, would publish to measurement = devicename deviceid tagname now the connector will correctly publish to measurement = devicename deviceid system fixed issue where docker bridge network interfaces displayed in system > network > interfaces list after upgrading from 3 16 11 fixed issue where deploying or upgrading litmus edge marketplace applications from litmus edge manager failed when an external typed docker network already existed fixed issue where events were not displayed in system > events when backups failed to apply to one or more components fixed issue where permissions changed for sub directories of /ftp data after upgrading litmus edge instances which prevented containers from launching fixed issue where upgrading from litmus edge 3 16 11 to 4 0 x silently changed the active dns resolver fixed an issue where some applications that require advanced permissions fail to launch in privileged mode from litmus edge manager resolved a compatibility issue with legacy ldap servers that require rsa key exchange for tls fixed issue where a checkbox could not be cleared after it was selected when modifying permissions in system > access control > manage roles various fixes for support bundle downloads fixed issue where updates to user role permissions did not persist even though a confirmation message indicated that changes were applied fixed issue where duplicate routes were generated when adding a static route the correct number of search results now displays at the bottom right in system > events > events history fixed an issue preventing cloud activation after a 2 hour trial license expired fixed issue where nats proxy setting was disabled after upgrading from 3 16 x to 4 0 x improved the nats proxy so that permission errors on incoming topics no longer cause high cpu usage in the access service this makes messaging more resilient under misconfigured permissions api fixed the error response payload returned by the post /access/accounts access rest endpoint