Looking for a bug fix list for all versions of Privilege Secure for Discovery?
All bug fixes will automatically be added here!
26.06 Updates
Patch Version 26.06.0 Released - Privilege Secure for Discovery
June 25, 2026
| ID | Description |
|---|---|
| 439601 | Entra ID sync performed a full Microsoft Graph pull on every cycle instead of delta sync. Three bugs in svc_sync.py prevented saved delta links from being reused, forcing a complete tenant pull every run. On large tenants (200K users, 100K groups): ~30-minute sync cycles with heavy API rate limiting. After fix: incremental delta syncs complete in ~1 second. A related crash in mixed LDAP + Entra ID environments with renamed groups was also resolved. |
| 438352 | Entra ID cloud devices and groups stored with incorrect SIDs. A byte-ordering error in GUID-to-SID conversion caused stored SIDs to not match what Windows reports. In environments using Entra ID groups as local admins, this silently dropped devices from access paths — My Systems and Access Risk reports may have underreported Entra ID group-based access. Present since Entra ID sync launched. Existing records are corrected automatically on the first sync after upgrade. |
| 439575 | Hybrid group **member_of** field populated from the wrong source. A copy-paste error caused member_of (parent groups) to be filled from members (direct members) instead of memberOf from Microsoft Graph. For nested hybrid groups, users with access flowing through those groups could be missing from access lists. Corrected automatically on the next sync. |
| 437492 | Entra ID “Last Successful Sync” timestamp never updated. The sync.finish field was not written on sync completion, so the Domain Configuration UI permanently showed the original domain creation date. LDAP/AD domains were not affected. Fixed. |
| 440591 | Entra ID domain missing from Access Risk domain dropdown. On Insight › Access Risk pages (Privileged Users, Segregation, Cumulative), the Entra ID domain was absent from the selector — a blank entry appeared instead. Fixed; a data migration corrects existing records. |
| 440341 | Access Risk chart showed no data for 1-Week and 1-Month time ranges. The date window calculation used current time-of-day instead of midnight UTC, causing recent records to fall outside the query window. The 90-day range was unaffected. Fixed. |
| 440343 | Daily access risk calculation crashed on computers with incomplete scan data. A missing scanTs field in any computer’s lastScan record caused the analytics job to crash and not retry until the next day, making access risk history permanently stale. Fixed; incomplete records are now treated as never scanned. |
| 440035 | Defunct LDAP Sync UI section removed from Settings › Services. The LDAP Sync “Run Interval Minutes” control had no effect since March 2025. The dead panel has been removed. The correct control is Settings › Services › General Sync Service Settings › Run Interval Minutes. |
| 436802, 436803 | Export buttons unclickable and filter row layout broken on Insight and Management pages. On Insight › Access Risk / Computer pages, export buttons (Copy/CSV/Excel/PDF) did not respond to clicks — a CSS conflict from the L0 rebrand. On Management › Systems, the “Show Filters” button was mispositioned and expanded filters wrapped to a second row. Both fixed. |
| 438320, 438336 | Insight Overview: Y-axis incorrect on Privileged Accounts chart; stray checkbox overlaying High Risk Systems chart. Y-axis now starts at zero. Checkbox positioning fixed. |
| 436994 | Domain Configuration table: last row obscured by the action bar border. Fixed. |
26.03 Updates
Patch Version 26.03.1 Released - Privilege Secure for Discovery
April 28, 2026
| ID | Description |
|---|---|
| 432701 | OAM Force Reset Loop — Fixed an issue where the force_reset flag set during initial OAM account creation was never cleared after a successful forced password reset. This caused the forced-reset code path to execute on every subsequent scan. In environments with a third-party Windows password filter DLL (registered under HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Notification Packages), this surfaced as a repeated STATUS_PASSWORD_RESTRICTION error (code 9999) on every rescan. |
| 432248 | CarbonBlack EDR Configuration Validation — Fixed an issue where CarbonBlack EDR configuration was not properly tested for validity when adding a new EDR provider from the Configure > Server page. |
| 424910 | EDR API Base URL Text Trimming — Fixed a bug where the API Base URL field in the EDR configuration page was incorrectly trimming input values on save. The full entered value is now preserved. The field also displays the full text on hover when the value is longer than the visible input width. |
Patch Version 26.03.0 Released - Privilege Secure for Discovery
April 9, 2026
Version 26.03.0 of Netwrix Privilege Secure for Discovery is now available, addressing the issues detailed below.
| ID | Description |
|---|---|
| 424620 | Fixed an issue where the Grant Access page for Tanium hosts did not display access details due to a “trunc is not a function” error. |
| 419153 | Ensured Docker daemon limits are properly configured during installation and upgrade. |
25.12 Updates
Patch Version 25.12.2 Released - Privilege Secure for Discovery
March 5, 2026
| ID | Description |
|---|---|
| 417839 | Fixed a misleading “missing service account” message appearing in the UI after sync for Linux resources. |
| 411164,412568 | Fixed an issue where UI elements and inventory data could disappear after some time in certain environments (regression observed after NPS-D 25.12.1 deployment). |
| 417304 | Fixed an issue where deleting a user with an active JITA session in AD could break host admin visibility and access. |
| 414652 | Fixed an issue where selecting a resource on the Grant Access page triggered a 404 error in the developer console. |
| 401818 | Ensures users and groups removed from Active Directory are also removed from servers in NPS-D, even if previously marked as persistent. |
| 416340,415542 | Added configurable RADIUS push notification timeout in Discover (15–180 seconds via dropdown, default 30s) to help prevent authentication timeouts. |
| 401328 | Resolved an inconsistency in bulk JITA request limits in Management > Systems, ensuring the supported 1000-item limit works correctly via both UI and file upload. |
Patch Version 25.12.1 Released - Privilege Secure for Discovery
January 30, 2026
The latest Hotfix, version 25.12.1 of Netwrix Privilege Secure for Discovery, is now available, addressing the issue detailed below.
| ID | Description |
|---|---|
| 411164, 412568 | Fixed an issue where UI elements and inventory data were not displayed correctly. |
Netwrix Privilege Secure for Discovery Q4 2025 Release (25.12.0)
December 18, 2025
No bugs were fixed in this update.
2.22 Updates
Patch Version 2.22.13 Released - Privilege Secure for Discovery
April 28, 2026
| ID | Description |
|---|---|
| 432701 | OAM Force Reset Loop — Fixed an issue where the force_reset flag set during initial OAM account creation was never cleared after a successful forced password reset. This caused the forced-reset code path to execute on every subsequent scan. In environments with a third-party Windows password filter DLL (registered under HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Notification Packages), this surfaced as a repeated STATUS_PASSWORD_RESTRICTION error (code 9999) on every rescan. |
| 432248 | CarbonBlack EDR Configuration Validation — Fixed an issue where CarbonBlack EDR configuration was not properly tested for validity when adding a new EDR provider from the Configure > Server page. |
| 424910 | EDR API Base URL Text Trimming — Fixed a bug where the API Base URL field in the EDR configuration page was incorrectly trimming input values on save. The full entered value is now preserved. The field also displays the full text on hover when the value is longer than the visible input width. |
Patch Version 2.22.12 Released - Privilege Secure for Discovery
April 2, 2026
Version 2.22.12 of Netwrix Privilege Secure for Discovery is now available, addressing the issues detailed below.
| ID | Description |
|---|---|
| 424620 | Fixed an issue where the Grant Access page for Tanium hosts did not display access details due to a “trunc is not a function” error. |
| 419153 | Ensured Docker daemon limits are properly configured during installation and upgrade. |
Patch Version 2.22.11 Released - Privilege Secure for Discovery
February 26, 2026
Version 2.22.11 of Netwrix Privilege Secure for Discovery is now available, addressing the issues detailed below.
| ID | Description |
|---|---|
| 417839 | Fixed a misleading “missing service account” message appearing in the UI after sync for Linux resources. |
| 411164,412568 | Fixed an issue where UI elements and inventory data could disappear after some time in certain environments (regression observed after NPS-D 2.22.9 deployment). |
| 417304 | Fixed an issue where deleting a user with an active JITA session in AD could break host admin visibility and access. |
| 414652 | Fixed an issue where selecting a resource on the Grant Access page triggered a 404 error in the developer console. |
Patch Version 2.22.10 Released - Privilege Secure for Discovery
February 19, 2026
Version 2.22.10 of Netwrix Privilege Secure for Discovery is now available, addressing the issues detailed below.
| ID | Description |
|---|---|
| 401818 | Ensures users and groups removed from Active Directory are also removed from servers in NPS-D, even if previously marked as persistent. |
| 416340,415542 | Increase the RADIUS push notification timeout to 30 seconds in Discover to prevent authentication timeouts. |
| 401328 | Resolved an inconsistency in bulk JITA request limits in Management > Systems, ensuring the supported 1000-item limit works correctly via both UI and file upload. |
Patch Version 2.22.9 Released - Privilege Secure for Discovery
January 29, 2026
Version 2.22.9 of Netwrix Privilege Secure for Discovery is now available, addressing the issues detailed below.
| ID | Description |
|---|---|
| 411164,412568 | Fixed an issue where UI elements and inventory data were not displayed correctly. |
Hotfix Version 2.22.8 Released for Netwrix Privilege Secure for Discovery
August 28, 2025
| ID | Description |
|---|---|
| 399037 | Removed extraneous example files |
Hotfix Version 2.22.7 Released for Netwrix Privilege Secure for Discovery
August 19, 2025
| ID | Description |
|---|---|
| 398560 | Users Unable to log into JITA |
Hotfix Version 2.22.6 for Netwrix Privilege Secure for Discovery Released
August 7, 2025
| ID | Description |
|---|---|
| 372420 | I/O Operation error on Server2025 |
| 383112 | OAM Error with Win 11 24H2 |
Patch Version 2.22.4 for Netwrix Privilege Secure for Discovery Released
May 22, 2025
- Resolved: CrowdStrike EDR integration error occurring during system rescans for policy application.
No separate download is required. Customers can pull the updated container version using the built-in script provided with Netwrix Privileged Secure for Discovery deployments.
Thank you for your continued feedback and support as we work to keep your environments secure and efficient.
Patch Version 2.22.3 for Netwrix Privilege Secure for Discovery Released
April 24, 2025
| ID | Description | Case # |
|---|---|---|
| 277727 | OAM: Password history does not track SID changes for alternate/built-in admin accounts | - |
| 346880 | Excessive Overdue Items Causes Delay in Rescan, JITA, and Expire | 00415656 |
Netwrix Privilege Secure for Discovery 2.22.2 is now Available
March 6, 2025
- NPS-D Highest Privileged Account Charts Missing in UI
- STATUS_RXACT_INVALID_STATE Error when scanning a Windows 11 with 24H2
- Renames of AD Groups Not Reflected in NPS-D System Inventories
- Duplicate OAM Alternate Administrators
- I/O Operation error on Server2025
- Managing some systems - console returns error (Windows 11 24H2)