Issues

• 🐛 Bug Report: Bucket "File level security" description says both permissions are required, but server grants access with either

  product / authproduct / consoleproduct / sitesproduct / storage
  Bug

  appwrite/appwrite#14931 · Filter by author Totremont opened on Oct 24, 2026
  3

• 🐛 Bug Report: Users created by team invitations have no Messaging contact targets

  product / authproduct / messagingproduct / vcssdk / cli
  appwrite/appwrite#14906 · Filter by author Spandan-Mishra opened on Oct 24, 2026
  1

• 🐛 Bug Report: Scheduled SMS still processes after being moved to draft

  product / authproduct / databasesproduct / functionsproduct / messagingproduct / storageproduct / vcs
  appwrite/appwrite#14904 · Filter by author Spandan-Mishra opened on Oct 23, 2026
  3

• migrate (V25) never adds the new sessions geo columns nor files.folder after upgrading from 1.9.x to 2.x — attributes are silently dropped at runtime

  product / authproduct / consoleproduct / databasesproduct / functionsproduct / messagingproduct / migrationsproduct / self-hostedproduct / storageproduct / vcs
  Bug

  appwrite/appwrite#14879 · Filter by author istornz opened on Oct 23, 2026
  3

• Storage file download failes with 403 on large files stored on a S3 provider

  product / consoleproduct / databasesproduct / localeproduct / messagingproduct / storage
  Bug

  appwrite/appwrite#14854 · Filter by author JoshLee0915 opened on Oct 22, 2026
  5

• when I try to connect my app, that time got permission error. but I'm the owner of the account.

  product / authproduct / sitessdk / cli
  Bug

  appwrite/appwrite#14702 · Filter by author shohag7552 opened on Oct 20, 2026
  2

• Review installer secret storage and benchmark Markdown escaping

  product / authproduct / consoleproduct / databasesproduct / storageproduct / vcs
  appwrite/appwrite#14681 · Filter by author loks0n opened on Oct 19, 2026
  

• Review console code scanning hardening findings by actual trust boundary

  product / authproduct / consoleproduct / databasesproduct / vcssdk / cli
  appwrite/appwrite#14680 · Filter by author loks0n opened on Oct 19, 2026
  1

  

• Remove shared fallback credentials from usage and execution database connections

  product / databasesproduct / functions
  appwrite/appwrite#14678 · Filter by author loks0n opened on Oct 19, 2026
  

• Add abuse limits to client-accessible transaction writes

  product / authproduct / databasessdk / cli
  appwrite/appwrite#14677 · Filter by author loks0n opened on Oct 19, 2026
  

• Update production base image libraries flagged by active Trivy scan

  product / avatarsproduct / functionsproduct / storageproduct / vcs
  appwrite/appwrite#14676 · Filter by author loks0n opened on Oct 19, 2026
  

• Add totalAll attribute to API Response

  product / databases
  Enhancement

  appwrite/appwrite#14669 · Filter by author abhishek-junghare opened on Oct 19, 2026
  2

• Locale currencies list offers only withdrawn codes for Belarus, Venezuela and Zambia

  product / authproduct / localeproduct / storage
  appwrite/appwrite#14627 · Filter by author yu2971512385-ui opened on Oct 18, 2026
  2

• Keep the released parameter order for updateOAuth2Kakao

  product / messagingsdk / cli
  appwrite/appwrite#14498 · Filter by author ChiragAgg5k opened on Oct 14, 2026
  

• 🐛 Bug Report: queue-retry requeues a copy under a new job ID and never deletes the original payload, which stays in Redis without a TTL

  product / databasesproduct / functionsproduct / messagingproduct / storageproduct / vcssdk / cli
  appwrite/appwrite#14491 · Filter by author JoshiJoshiJoshi opened on Oct 14, 2026
  1

• 🐛 Bug Report: Redis connections have no read timeout: an unresponsive Redis hangs every request, and after ≈ 4 s the node answers 503 to everything with an empty body and no log entry

  api / realtimeproduct / authproduct / databasesproduct / storagesdk / cli
  appwrite/appwrite#14490 · Filter by author JoshiJoshiJoshi opened on Oct 14, 2026

• 🐛 Bug Report: Two concurrent transactions can both commit a claim of the same row (conflict check uses a timestamp taken before the commit is visible)

  product / authproduct / databasesproduct / messagingsdk / cli
  appwrite/appwrite#14489 · Filter by author JoshiJoshiJoshi opened on Oct 14, 2026
  2

• 🐛 Bug Report: Every restart of the schedule task re-runs the cron executions of the last 5 minutes

  product / databasesproduct / functionsproduct / sitesproduct / vcs
  appwrite/appwrite#14488 · Filter by author JoshiJoshiJoshi opened on Oct 14, 2026

• 🐛 Bug Report: Jobs of a stopped or crashed worker are redelivered only after 25 hours (reapAfter = 90_000 s)

  product / databasesproduct / functionsproduct / migrationsproduct / sites
  appwrite/appwrite#14487 · Filter by author JoshiJoshiJoshi opened on Oct 14, 2026
  1

• 🐛 Bug Report: SSR runtime never clears its per-request timeout timer, so memory grows with requests/s × site timeout

  product / authproduct / databasesproduct / functionsproduct / self-hostedproduct / sitesproduct / storage
  appwrite/appwrite#14474 · Filter by author JoshiJoshiJoshi opened on Oct 14, 2026
  1

• 🐛 Bug Report: Static sites check a bcrypt password on every request (~48 ms CPU each, ~75 req/s per cluster)

  product / authproduct / databasesproduct / domainsproduct / functionsproduct / self-hostedproduct / sitesproduct / storage
  appwrite/appwrite#14473 · Filter by author JoshiJoshiJoshi opened on Oct 14, 2026

• 🐛 Bug Report: Executor uses PHP's default 128M memory_limit, so a few parallel 12-16 MiB responses crash it and remove all runtimes

  product / authproduct / databasesproduct / domainsproduct / functionsproduct / sitesproduct / storageproduct / vcs
  appwrite/appwrite#14472 · Filter by author JoshiJoshiJoshi opened on Oct 14, 2026
  1

• Claude Desktop Cloud setup still defaults to the local MCP bridge

  product / consoleproduct / databasesproduct / localeproduct / self-hostedsdk / cli
  appwrite/appwrite#14465 · Filter by author playb0t opened on Oct 14, 2026
  2

• 🐛 Bug Report: Unbounded realtime subscriptions per connection crash the realtime worker and disconnect all its clients

  api / realtimeproduct / authproduct / consoleproduct / databasesproduct / self-hostedsdk / cli
  appwrite/appwrite#14430 · Filter by author JoshiJoshiJoshi opened on Oct 13, 2026
  1

• 🐛 Bug Report: CSV export writes formula-like cell values unescaped (CSV injection)

  product / authproduct / databasesproduct / migrationsproduct / storagesdk / cli
  appwrite/appwrite#14428 · Filter by author JoshiJoshiJoshi opened on Oct 13, 2026