Records Security Notice
Published Date: 10/15/2026
Version: 1.0
Executive Summary
A security update is available for Records that resolves identified High-severity vulnerabilities. Customers using affected versions should upgrade as soon as possible.
Advisory Details
Severity: High
Affected Versions: All versions earlier than 3.6.0
Resolved Version: 3.6.1
The update addresses vulnerabilities related to input validation. Additional technical details are limited to reduce the risk of exploitation.
Suggested Actions
Customers running Records versions that are affected are highly recommended to take the following step as soon as possible to mitigate the risk:
Mitigation Option: Perform Application Upgrade
Upgrade to the latest version of Records (3.6.1). The links can be found below:
- Records Upgrade Package: 3.6.1 Upgrade Package
NOTE: If your instance of Records has an environment specific hotfix applied or if you are not certain whether it does, please contact our technical support staff at support@avepoint.com to confirm appropriate upgrade or manual work-around steps.
AvePoint implements best-in-class techniques for identifying, protecting, and detecting cybersecurity threats. The information security and data privacy of our customers is AvePoint’s highest priority. If you have any questions about this and/or you are contacted by anyone else about this issue, please contact our security team immediately at security@avepoint.com.
For your additional information please find AvePoint’s reporting policy and response plan: https://www.avepoint.com/company/vulnerability-reporting-policy