Keeper-Security/Commander v18.0.8

Release 18.0.8

on GitHub

Keeper Commander 18.0.8

PAM: Expanded Database Protocol Support

• pam connection edit and pam import now support seven additional database protocols: mariadb, oracle, mongodb, redis, elasticsearch, clickhouse, and dynamodb (in addition to the existing mysql, postgresql, and sql-server)

PAM: RBI (Remote Browser Isolation) Enhancements

• pam rbi edit: new --session-persistence option with none, user, or resource modes
• New RBI settings in pam import and pam extend: allow_file_uploads, allow_file_downloads, disable_audio, audio_channels, audio_bps, audio_sample_rate

PAM: Scrollback Buffer for Terminal and Database Connections

• pam import/pam extend now support a scrollback setting for SSH, Kubernetes, CLI-capable database, and Windows Remote App connections — aligned with Web Vault behavior

get Command: Secret Field Masking

• The get command now masks all secret-type fields and custom fields in --detail and --fields output, preventing accidental exposure of sensitive values in console output or logs

record-add: Label Control

• New --labels=on/off flag to omit redundant labels on standard fields when creating records programmatically or via scripts

Bug Fixes

• KSM: Fixed sync spinner corrupting console output
• PAM/Discovery: Switched DAG transport to legacy JSON single-stream mode; removed use_per_graph_endpoints flag that caused routing errors
• LastPass import: Handle Base64-encoded private keys during vault import
• Docker: Fixed persistent login error handling in interactive console sessions; improved record lookup fallback in keeper get shell integration