Endpoint Privilege Manager 1.2.1

Released May 27, 2026

Keeper EPM v1.2.1 — Security & Stability Hotfix

Keeper EPM v1.2.1 is a hotfix release that closes a several security and stability issues across Windows, macOS, and Linux agents. No features, UX changes, or API contract changes are included.

---

Security Fixes

Windows

A session-context guard now forces a real admin privilege verification for any user-session caller, and the trusted-process shortcut applies only to system-session processes. (KPAM-2012)

Linux

A control evaluation path could return ALLOW for a request that policy had explicitly denied. Corrected. (KPAM-2029)

Linux & macOS

Security issues with agent re-registration were addressed. (KPAM-2022)

---

Stability Fixes

macOS — Request Access launch failures

Applications launched from the Request Access flow could fail to start; resolved. (KPAM-2051)

macOS — false "Failed…" message on successful MFA

MFA completion now reports success correctly. (KPAM-2036)

Linux — KeeperClient "Show" failed to sync

The refresh triggered by Show fired before the MQTT connection was open, so approval/toast updates were lost. The refresh now waits for the connection to be ready. (KPAM-2039)

Linux — keepersudo Approval flow for standard user

Standard (non-admin) users could not complete Approval-controlled requests through keepersudo. Resolved. (KPAM-2033)

---

Out of Scope

No new features, no policy-type changes, no API-contract changes, no cloud or backend changes, no MQTT broker changes, no new platform support.