Version 10.3.1
December 16, 2025
The Work.AI 10.3.1 release delivers a trimmed package focused on addressing security vulnerabilities and updating key components.
The package includes a limited set of components and is intended only for new users with no previous Work.AI installations. Upgrades from 10.3 or earlier versions to 10.3.1 are not supported. Installation is available exclusively on RHEL 9.
Simplified API access with OAuth 2.0 authentication
To support a more secure and seamless integration with Control Tower (CT) via API, we have enabled OAuth 2.0 authentication. The enhancement consolidates access to various endpoints, such as event logs, transaction data, and AI Agent list, under a single authentication method.
Streamlined and secure Manual Task access in Workspace
To ensure user selection during Manual Task assignment in Workspace is up to date, a new external API is introduced, providing real-time access to the user list. The API ensures that newly added users are immediately available for selection, even after a Business Process has already started. You no longer need to restart Business Processes to update user information, which reduces the support overhead for your automations.
Additionally, validation via Keycloak has been enabled to ensure that both pre-assigned and re-assigned tasks are mapped to valid user IDs. The platform verifies that the user ID is active for a specific tenant, supporting multi-tenancy scenarios. It also filters out users who lack necessary permissions, which ensures that assignments are both secure and compliant with access restrictions.
Improvements
Cloud deployments
You can now toggle the BillingInfoService on or off using a dedicated flag in ZooKeeper. The same logic for enabling or disabling the transmission of billing events has been implemented for the CT Worker, JNW, and AutoML-related billing info services, ensuring streamlined control across deployments.
MT Designer
The MT Designer components using asynchronous data now support promise-based custom validators. This enhancement ensures consistent and reliable validation, including in nested structures like Data Grid and Edit Grid, giving you greater flexibility to build complex, data-driven forms without compromising accuracy or performance.
Upgrades
To eliminate vulnerabilities, the following updates are introduced:
Updated Keycloak to v26.3.3.
Updated ZooKeeper to v3.9.4.
Updated Redis to v8.2.2 and PostgreSQL to 16.10 to address the vulnerabilities linked to the outdated Gosu library.
Updated Traefik to v2.11.29.
Updated etcd to v3.6.5.
Updated the libquadmath library to v8.5.
Updated Consul-Template to v0.40.0.
Updated Elastic Agent to v8.19.4.
For more details, see View third-party libraries and tools.
Bug fixes
S3 Manager
Fixed the issue where uploading files exceeding 5 GB via the S3 Manager user interface would fail due to the lack of multipart upload handling. Now, large files are chunked correctly to comply with the 5 GB PUT limit in S3.
Resolved the issue where transferring files exceeding 5 GB from FTP to S3 using Generic Connector would fail due to the absence of multipart upload handling. The connector now correctly chunks large files to comply with the 5 GB PUT limit in S3.