AI Security
Search K

Appearance

October 14, 2026 - SaaS - v10.139.2 ​

This release includes updates in the following areas for F5 AI Security:

AI Red Team ​

Safety paradox attack pack ​

The November attack pack adds the Safety paradox attack vector. You can now use Safety paradox in your Red Team campaigns. For more information, see November 2026: Safety paradox.

CASI leaderboard update ​

The CASI leaderboard now shows results from the October attack pack, which adds the Involuntary in-context learning attack vector. For more information, see Attack pack timeline.

Search and filter raw report data ​

The raw data view for a Red Team report now loads results in pages. Search and filter the results to find specific attacks. The view shows how many results match your filters and how many results there are in total. Select Load more to see the next page.

When you download the raw data, select Full report to get every result, or Filtered results to get only the results that match your filters. For more information, see Open a report.

Reports list refreshes automatically ​

The Reports page now refreshes automatically. You can see the latest report status without reloading the page.

Empty report sections hidden ​

Red Team reports now hide sections that have no data. Reports are shorter and easier to scan.

Platform ​

Manage all API tokens from one page ​

In the UI, the new API Tokens page replaces the separate Personal and Global tabs with a single table. The table shows the tokens that your role lets you see. Org admins see every token in the organization. Each token has one of these scopes:

  • Personal: Belongs to you and is tied to your account.
  • Project: Can access only the selected project.
  • Organization: Can access organization resources.

The list shows active tokens by default. Filter the list by Owner, Scope, or Status, and sort it by name, expiry date, or status. A token's status is Active, Expiring soon, Expired, or Revoked. The Expiring soon status helps you replace a token before it stops working.

To create a token, select Generate API token. The secret appears only once, right after you generate the token, so copy it then. Org admins can revoke several tokens at once: select the tokens, and then select Revoke selected.

Project admins can now create project tokens from this view. For more information, see Tokens.

Get every guardrail added to a project ​

By default, the GET /backend/v1/projects/{project} endpoint returns only the guardrails that are turned on in a project. Add the includeAdded=true query parameter to also return the project's turned-off guardrails, guardrail packages, and connections in one request.

Resolved issues ​

This release fixes the following issues:

  • The print view of a Red Team report didn't show the OWASP 2026 attack success rates chart or the attack success by attack vector chart. This was a known issue in the September 30 release.
  • In the print view, OWASP chart text and borders didn't display correctly in dark mode.
  • The attack matrix legend showed the wrong thresholds, and its colors didn't match the matrix.
  • Red Team reports showed the OWASP chart when no attacks ran.
  • Reports that contained only custom attacks didn't show the model name.
  • Section numbers in the agentic section of Red Team reports used a smaller font size than before.
  • On the Reports page, starting an attack run cleared the filters on the reports list.
  • On the Reports page, the report status badge didn't display correctly on small screens, and the progress bar in the Status column wrapped onto two lines.
  • If you canceled a campaign run that you had retried, the run stayed in the Cancelling status and never changed to Cancelled.
  • In the fingerprints view, a long model name could hide the name of the agentic resistance attack.
  • On the dashboard, the six-month time filter returned an error and the dashboard didn't update.
  • On the dashboard, the scan count could be negative.
  • The GET /backend/v1/scans endpoint ignored the projectId query parameter and returned scans from every project.
  • In the Python SDK, generated models didn't send aliased fields, such as global_, when you set them by their Python attribute name. For example, PatchScannerPackageAccessBody(global_=True) didn't send {"global": true}.
  • In the Python SDK, stopping an asynchronous client left its HTTP connections open.

Breaking changes ​

There are no breaking changes or required customer actions in this release.

Updated at: