Linux Agent 8.0.x Release Notes

Linux Agent 8.0.4: March 16, 2026

This agent release includes the following RiskWatch-related improvements:

• Enhanced support for containerized JVM environments:

  Resolved issue with inserting Java probes into containerized JVM processes.

• Accurate reporting of probe hits for short-lived processes:

  Improved RiskWatch probe hit reporting to accurately track events occurring within short-lived processes.

• Simplified probe insertion for legacy Java packages:

  Updated package version matching logic for older Java packages.

Linux Agent 8.0.2: March 2, 2026

• Fixes CVE-2025-68121.

Linux Agent 8.0: February 19, 2026

This agent release introduces RiskWatch with new capabilities in workload monitoring for active vulnerabilities.

Traditional scanners flag every outdated package version as a risk. RiskWatch goes further: it monitors your running workloads and detects when vulnerable code actually executes.

Agent 8.0.2 release includes the following RiskWatch features:

• Scan and monitor running packages on a machine by placing probes targeting specific CVEs.

• Supports four language runtimes: C, C++, Go, and Java from packages for Ubuntu, Debian, and Amazon Linux.

• A new Java Runtime hook to inspect JVM environments running Java 17 or later.

• Over-the-air probe delivery: Fast and flexible probe delivery that does not require an agent upgrade to receive new probes, enabling rapid responses to emerging threats.

• RiskWatch metrics reporting for probe hits and installs that will be used in console dashboards, composite alerts, and risk scores.

For more information about RiskWatch, see RiskWatch Is Here - Vulnerable Activity Detection & Response in the Fortinet Community Blogs.