LoginSign Up
← Back to all sparks
R

Retool

INFRA · APIS
Velocity6.3

Low-code platform for building internal tools and apps

retool.com ↗

Retool's week is security disclosures and patch trains after a fast run of model launches.

internal toolsself-hostedsecurityai modelsrelease channels
◆Current state
Retool spent mid-October adding models (GPT 6.1 Sol, Claude Sonnet 5.5, Gemini 4 Argon) and widening multi-instance releases to more Git hosts. This week was maintenance: two 4.34/4.0 stable patches, 4.78 on Edge, and two security disclosures. The one that matters is a Node.js RCE (CVE-2026-111497) affecting Retool services that call user-configured URLs.
◆Where it's heading
Retool runs two tracks: fast AI model onboarding on cloud and a steady, security-heavy cadence for self-hosted customers. Edge builds land about weekly (4.74 to 4.78 in eight days), and the disclosures page is becoming a regular channel for telling on-prem admins what to patch.
◆Prediction
Expect a stable-channel patch that bundles the Node.js fix, another Edge build within a week, and the next frontier model added soon after it launches.

◆Recent moves

  1. 3d ago

    Compromised eMudhra/emSign intermediate CAs trusted by bundled certificate stores

    View source ↗
  2. 5d ago

    Self-hosted Retool 3.334 stable updates

    View source ↗
  3. 5d ago

    Retool 4.81 Edge for self-hosted instances

    View source ↗
  4. 5d ago

    Node.js October 2026 security vulnerabilities (CVE-2026-111497)

    Retool discloses its exposure to the October Node.js vulnerabilities, including an RCE in services that send HTTP requests to user-configured URLs. For self-hosters it's a must-read, since resources and workflows call user-supplied URLs all the time.

    View source ↗
  5. 5d ago

    Self-hosted Retool 4.34 and 4.0 stable updates

    The second stable patch for 4.34 and 4.0 in two days, with no notes in the feed. It most likely ships the Node.js fixes disclosed the same day.

    View source ↗
  6. 7d ago

    Self-hosted Retool 4.34 and 4.0 stable updates

    A routine stable-channel patch for the 4.34 and 4.0 self-hosted lines. It keeps the near-weekly maintenance rhythm.

    View source ↗