Release notes

GraphDB release notes provide information about the features and improvements in each release, as well as various bug fixes. GraphDB’s versioning scheme is based on semantic versioning. The full version is composed of three components:

major.minor.patch

e.g., 11.2.0 where the major version is 11, the minor version is 2 and the patch version is 0.

Occasional versions may include a modifier after a hyphen, e.g., 11.2.0-RC1 to signal additional information, for example, a test release (TR1, TR2 and so on), a release candidate (RC1, RC2 and so on), a milestone release (M1, M2 and so on), or other relevant information.

Note

Releases with the same major and minor versions do not contain any new features. Releases with different patch versions contain fixes for bugs discovered since the previous minor version. New or significantly changed features are released with a higher major or minor version.

GraphDB 11.5 includes the following components with their version numbers:

  • RDF4J

  • GraphDB Connectors

  • GraphDB Workbench

Their versions use the same semantic versioning scheme as the whole product, and their values are provided only as a reference.

GraphDB 11.5.1

Released: 23 September 2026

Component versions

RDF4J

Connectors

Workbench

5.3.1

16.8.1

3.5.1

Important

GraphDB 11.5.1 fixes a number of issues, including several critical issues with the GraphDB cluster. These issues include several bugs with the secondary cluster, causing it to get stuck while verifying entry or go out of sync while building a snapshot. Other critical issues with the cluster mechanism addressed by this patch release include not being able to create a cluster when security is on, missing repositories resulting in a corrupted transaction log, and nodes not being able to create a snapshot, among others.

In addition to the issues with the cluster mechanism, GraphDB 11.5.1 introduces several other bug fixes and improvements.

We recommend everyone to update.

Warning

Solr connector deprecation notice

The Solr connector has been deprecated and will be removed in version 12 of GraphDB. If you are using it, please contact us via the available support channels to discuss the alternatives.

Core database

New features and improvements

  • GDB-14703 Introduce logging in OwlimSchemaRepository

Bug fixing

Description

Introduced

Severity

GDB-15093

The ValuesSubselectOptimiser does not handle SubSelects within MINUS and OPTIONAL

Medium

GDB-15085

The graphdb.home.data.recovery property is missing from graphdb.properties

11.5

Minor

GDB-15057

Unlinked instances returned in union property evaluation

11.5

Medium

Security

Fixed third-party vulnerabilities

Vulnerability

Severity

CVE-2026-54399

7.5 High

CVE-2026-54428

7.5 High

Cluster

New features and improvements

  • GDB-15107 primaryTags are now sorted alphabetically in clusterResponse (previously they were unsorted)

  • GDB-14848 Decrease the minimal length restriction of the secondary cluster tags to 1

  • GDB-13681 Introduce support for custom properties passed as environment variables in containerized deployments

Bug fixing

Description

Introduced

Severity

GDB-15054

Cannot create cluster when security is enabled and x509 is active

11.4.2

Critical

GDB-15045

Cannot attach secondary cluster due to NPE

Critical

GDB-15005

Secondary cluster node stuck in verifying entry

Critical

GDB-15003

Secondary node goes out of sync while building a snapshot

Critical

GDB-14337

Unable to replicate data between nodes with many repositories

11.3.3

Critical

GDB-14953

Cluster enters an OUT_OF_SYNC state when usernames contain non-ASCII Unicode characters

10.8

Critical

GDB-14846

Nodes stuck in OUT_OF_SYNC and resetting to term 1 when writing during restore

Blocker

GDB-14719

Corrupted transaction log due to missing repositories lacks an automatic recovery path

10.0

Critical

GDB-14565

Proxies cannot discover new leader if the process of the current one is suspended

Major

GDB-10138

Node can’t create snapshot due to NoSuchFileException for Similiarity file

10.1

Major

GraphQL

Bug fixing

Description

Introduced

Severity

GDB-15038

GraphQL timeout not respected

11.5

Medium

LLM & AI

New features and improvements

  • GDB-15115 Introduce support for Entra Id Auth for Azure OpenAI embedding models for vector search in connectors

  • GDB-14999 Introduce a way to pass a null values for Temperature and Top P when creating or editing an agent in TTYG

Bug fixing

Description

Introduced

Severity

GDB-14841

MCP sparql_query tool fails when a SPARQL query includes onto:fts predicate and specifies the index

11.3.3

Medium

GDB-14451

Talk to Your Graph fails to initialize with some models in Amazon Bedrock

11.2.1

Medium

External integrations

Bug fixing

Description

Introduced

Severity

GDB-15016

Connector instances doesn’t censor passwords

Medium

Workbench

New features and improvements

  • GDB-14969 Improve the clarity over GQL permission checkboxes in the repository permissions table

  • GDB-14908 Improve how the identifier tag for the Secondary cluster is displayed and sorted

Bug fixing

Description

Introduced

Severity

GDB-15006

The dropdown under the SPARQL view Run button contains white borders

11.0

Minor

GDB-15032

The caching mechanism causes incorrect or missing text to be displayed in the Workbench

11.4.3

Medium

GDB-14998

Cluster settings sidebar is missing a scrollbar for the identifier tags

11.0

Minor

GDB-14985

Making REMOTE repo active triggers infinite autocomplete message spam

11.4.3

Medium

GraphDB 11.5.0

Released: 19 August 2026

Component versions

RDF4J

Connectors

Workbench

5.3.1

16.7.0

3.5.0

Important

GraphDB 11.5 introduces several new features that provide administrators with more control over its security mechanisms. It introduces a new repository-scoped permission — repository maintainer — which grants a user maintenance permissions for a specific repository without giving them indiscriminate access to all repositories. This minor release also introduces the option to use multiple authorization sources, combining LDAP, OAuth and Local databases. With 11.5, a primary source and one or more additional sources can be combined, which can be particularly useful in granting temporary access to users managed through the local authorization database when using an external security provider, reducing the need for lengthy IdP workflows.

The addition of the repository maintainer permission also brings a change in the nomenclature of user roles. Prior to GraphDB 11.5, the terminology did not differentiate between the roles assigned to a user and the additional repository-level permissions that can be assigned to users. With GraphDB 11.5, they are now called “user roles” and “additional permissions” respectively. This change is only with the terminology and does not affect the existing security mechanism in any way. No actions are required, but more information can be found in the Migrating GraphDB configurations page.

GraphDB 11.5 also introduces a new unifed metric endpoint for Prometheus monitoring. The endpoint returns all instance metrics in a single response, ready for ingestion by Prometheus.

The query log and the slow-query log now include the name of the repository where a query was executed, as well as the name of the user who executed it. The name of the repository is always included, while the username is excluded by default for security reasons.

Additionally, GraphDB 11.5 includes numerous other bug fixes and smaller improvements, enhancing overal product stability and user experience, including a critical RCE vulnerability through malicious code in prefixes, and a critical issue with the performance of max active repositories during cluster creation.

The development of the features in this release was partially funded by the EnrichMyData (GA nu: 101070284) Horizon Europe eu-flag research project.

Maintain repository permission

GraphDB 11.5 introduces a new repository-level permission maintain_repo_<repositoryId>, which grants a user elevated management permissions for a specific repository without giving them access to any other repository. A user with this permission can restart a given repository and edit its permissions, but cannot delete a repository.

Multiple authorization sources

GraphDB now supports configuring multiple authorization sources simultaneously. Previously, only one authorization backend could be active at a time (local, ldap, or oauth). With 11.5, a primary source and one or more additional sources can be combined. Adminstrators can now grant temporary access to users managed through the local authorization database directly in the Workbench using the UI and without touching the IdP.

Unified metrics endpoint for Prometheus

GraphDB 11.5 adds a unified metrics endpoint that returns all instance metrics in a single response, ready for ingestion by Prometheus and compatible monitoring stacks. The endpoint aggregates all Prometheus metrics (such as system, repository, cluster, and query statistics), as well as the newly introduced license metric, which monitors the number of days left until your GraphDB license expires.

Reduced disk space requirements through moving the replication’s snapshot location

Prior to GraphDB 11.5, when setting up a cluster, GraphDB required disk space equal to at least twice the size of the repository’s data directory. Now, when configuring a cluster, the disk space requirements can be significantly reduced by changing the replication’s snapshot location to be outside of the data directory. Decoupling the snapshot storage from the repository data directory can optimize the disk footprint of cluster deployments. This is controlled through the configuration property graphdb.home.data.recovery.

Enhanced query and slow-query logging

The query log and slow-query log now include additional contextual fields to help operations teams understand the query load of a production instance:

  • Repository — the ID of the repository in which the query or update was executed

  • User — the user who initiated the query or update

These additions make it significantly easier to attribute load to specific users and repositories. For security reasons, the user is excluded from the logs by default.

Warning

Solr connector deprecation notice

The Solr connector has been deprecated and will be removed in version 12 of GraphDB. If you are using it, please contact us via the available support channels to discuss the alternatives.

Core database

New features and improvements

  • GDB-15019 Reorder VALUES within sub-selects after first stage of optimisation

  • GDB-14965 The /operations endpoint no longer shows a warning if cluster nodes are in SYNCING state

  • GDB-14801 Unified metrics endpoint for Prometheus

  • GDB-14799 Query and slow-query logs now include the repository and user ID associated with the logged query or update

  • GDB-13487 Expose more precise metrics in SYSINFO to measure the total versus active number of pages, number of entities, and the fragmentation level of GraphDB’s native repository indexes

Bug fixing

Description

Introduced

Severity

GDB-14649

Virtualisation-related Ontop files can be edited only once

Medium

GDB-13586

Attempting to change an Ontop repoistory configuration after it has been initially created results in an unlogged Workbench error when sending the PUT request to the backend

10.8

Major

Cluster

New features and improvements

  • GDB-14858 Stream large queries over gRPC instead of relying on configurable message size limit

  • GDB-14828 Allow admins to set a replication’s snapshot location outside of the data directory to reduce disk space requirements

Bug fixing

Description

Introduced

Severity

GDB-15007

Secondary cluster tag field does not save the identifier on hitting Enter key

11.0

Medium

GDB-15001

Max active repositories during cluster creation performing worse than expected

11.4.1

Critical

Security

New features and improvements

  • GDB-14679 Implement Util function that can be called from command line to create a symmetric 256 key and keystore to hold it

  • GDB-14462 Multiple authorization sources to allow granting local temporary access to the system without modifying the security credentials

  • GDB-14303 Repository maintainer permission to allow user access for editing specific repositories

Bug fixing

Description

Introduced

Severity

GDB-15049

RCE vulnerability in ruleset upload through malicious code in prefixes

11.4.3

Critical

Fixed third-party vulnerabilities

Vulnerability

Severity

CVE-2026-40984

7.5 High

CVE-2026-40983

7.5 High

GraphQL

New features and improvements

  • GDB-14119 Add support for standard directives @skip and @include

LLM & AI

New features and improvements

  • GDB-14982 Add support for AWS Bedrock for embedding model

External integrations

New features and improvements

  • GDB-15013 Remove RDF Priming Plugin from distribution

  • GDB-14643 Update the Lucene connector to the latest official version 10.4.0

Workbench & UX

New features and improvements

  • GDB-14938 Preserve the state of the Solr banner in Workbench

  • GDB-14905 Move secondary cluster refreshing animation to a less-disturbing position

  • GDB-14892 Raw responses dark theme contrast visibility increase

  • GDB-14566 Vizgraph config dropdown now include saved graph snapshots

Bug fixing

Description

Introduced

Severity

GDB-14941

Free access checkboxes are invisible when OFF

11.4.1

Minor

GDB-14921

Incorrect scaling of elements in the repository dropdown menu

11.4.1

Minor

GDB-14890

Explain plan results are not visible when using the dark theme

11.4

Medium

GDB-14800

Various console errors in the Class Hierarchy view after navigating through pages in the new Workbench

Medium