# Appwrite 1.9.7 — Release & Upgrade Intelligence
- **Product:** Appwrite (https://appwrite.io)
- **Version:** 1.9.7
- **Released:** Oct 08, 2026
- **Impact Score:** 5/10
- **Breaking Changes:** Not verified
- **Canonical Analysis:** https://changelogs.us/appwrite/updates/1.9.7/

## Executive Summary (TL;DR)
Appwrite 1.9.7. Source highlight: Appwrite 1.9.7 is a security patch for the 1.9 line. It closes two migration paths that could read data a user should not reach, expires JWTs together with their session, and hardens the builds worker. It ships with the 8.7.37 self-hosted Console (was 8.7.30). Upgrading from 1.9.6 needs no migration

## Bug Fixes
- **Console 8.7.37**, which fixes the row editor rendering every array column as a string input. (#13130)
- Reject a JWT once the session it was created from has expired. Before, a JWT stayed valid for its own duration after its session expired. (#13169, Fixes #8000)
- Quote the build directory passed to `tar`, so root directories with spaces or quotes build correctly. (#14006)
- Remove the unused, undocumented `/v1/cards/cloud*` endpoints. (#14067)
- The release workflow no longer moves the `latest` image tag, so publishing a 1.9.x patch leaves `latest` on 2.x