# Appwrite 2.7.1 — Release & Upgrade Intelligence
- **Product:** Appwrite (https://appwrite.io)
- **Version:** 2.7.1
- **Released:** Nov 04, 2026
- **Impact Score:** 8/10
- **Breaking Changes:** Not verified
- **Canonical Analysis:** https://changelogs.us/appwrite/updates/2.7.1/

## Executive Summary (TL;DR)
Appwrite 2.7.1 is a critical security release that updates the Open Runtimes executor to version 1.3.1 to mitigate a severe sandbox escape vulnerability. Teams hosting instances where untrusted users can deploy functions or sites must upgrade immediately and rotate their executor secrets.

## Improvements
- Added OPR_EXECUTOR_SECRET_PREVIOUS for zero-downtime executor secret rotation
- Introduced an opt-in streamed response format in executor versions 1.2.x and 1.3.x

## Bug Fixes
- Patched Open Runtimes executor vulnerability allowing symlink traversal and unauthorized access to environment secrets and host Docker control