Gradle 22.7.9 Release: Daemon socket permission restriction and fix for Maven/Gradle graph analysis shell execution

Vulnerability Overview Version: 22.7.9 Release Date: 2026-09-01 Key Fixes: - Restricted socket access for daemon and plugin workers to owner user only (#36370, #36586, #36463) - Case-insensitive comparison of daemon workspace root on Windows (#36835, #36722) - Closed daemon log descriptor to prevent Node 26 crashes (#36280) - Fixed ShellArg helper for port queries in the no-shell generator (#36215, #36626, #35954) - Stopped running Maven and Gradle graph analysis through the shell (#36626, #36215) Impact Scope Affected Components: - Daemon - Plugin worker - Windows systems - Node 26 - Maven and Gradle graph analysis Remediation Specific Fixes: - Restrict socket access permissions - Case-insensitive comparison of workspace root - Close log descriptor - Fix port query ShellArg helper - Stop running Maven and Gradle graph analysis via shell Contributors AgentEnder Craigory Coppola FrozenPandaz Jason Jean Jelle Bruisten Leosvel Pérez Espinosa Resources Source code (zip) Source code (tar.gz) Acknowledgements AgentEnder Craigory Coppola FrozenPandaz Jason Jean Jelle Bruisten Leosvel Pérez Espinosa Additional Information Released by: FrozenPandaz Release Date: 2026-09-01 Commit Hash: 92c5d59 Contributor Avatars JelleBruisten, AgentEnder, and 2 other contributors Assets Source code (zip) Source code (tar.gz) Footer © 2026 GitHub, Inc. Terms Privacy Security Status Community Docs Contact Manage cookies Do not share my personal information Navbar Platform Solutions Resources Open source Enterprise Pricing Other Notifications Forks: 3K Stars: 29.4K Code Issues: 271 Pull requests: 187 Discussions Actions Projects Security and quality Insights Release 22.7.9 Compare Compare Fixes Restrict socket access for daemon and plugin workers Case-insensitive comparison of workspace root Close log descriptor Fix port query ShellArg helper Stop running Maven and Gradle graph analysis via shell Acknowledgements AgentEnder Craigory Coppola FrozenPandaz Jason Jean Jelle Bruisten Leosvel Pérez Espinosa Contributors JelleBruisten, AgentEnder, and 2 other contributors Assets Source code (zip) Source code (tar.gz) Footer © 2026 GitHub, Inc. Terms Privacy Security Status Community Docs Contact Manage cookies Do not share my personal information Navbar Platform Solutions Resources Open source Enterprise Pricing Other Notifications Forks: 3K Stars: 29.4K Code Issues: 271 Pull requests: 187 Discussions Actions Projects Security and quality Insights Release 22.7.9 Compare Compare Fixes Restrict socket access for daemon and plugin workers Case-insensitive comparison of workspace root Close log descriptor Fix port query ShellArg helper Stop running Maven and Gradle graph analysis via shell Acknowledgements AgentEnder Craigory Coppola FrozenPandaz Jason Jean Jelle Bruisten Leosvel Pérez Espinosa Contributors JelleBruisten, AgentEnder, and 2 other contributors Assets Source code (zip) Source code (tar.gz) Footer © 2026 GitHub, Inc. Terms Privacy Security Status Community Docs Contact Manage cookies Do not share my personal information Navbar Platform Solutions Resources Open source Enterprise Pricing Other Notifications Forks: 3K Stars: 29.4K Code Issues: 271 Pull requests: 187 Discussions Actions Projects Security and quality Insights Release 22.7.9 Compare Compare Fixes Restrict socket access for daemon and plugin workers Case-insensitive comparison of workspace root Close log descriptor Fix port query ShellArg helper Stop running Maven and Gradle graph analysis via shell Acknowledgements AgentEnder Craigory Coppola FrozenPandaz Jason Jean Jelle Bruisten Leosvel Pérez Espinosa Contributors JelleBruisten, AgentEnder, and 2 other contributors Assets Source code (zip) Source code (tar.gz) Footer © 2026 GitHub, Inc. Terms Privacy Security Status Community Docs Contact Manage cookies Do not share my personal information Navbar Platform Solutions Resources Open source Enterprise Pricing Other Notifications Forks: 3K Stars: 29.4K Code Issues: 271 Pull requests: 187 Discussions Actions Projects Security and quality Insights Release 22.7.9 Compare Compare Fixes Restrict socket access for daemon and plugin workers Case-insensitive comparison of workspace root Close log descriptor Fix port query ShellArg helper Stop running Maven and Gradle graph analysis via shell Acknowledgements AgentEnder Craigory Coppola FrozenPandaz Jason Jean Jelle Bruisten Leosvel Pérez Espinosa Contributors JelleBruisten, AgentEnder, and 2 other contributors Assets Source code (zip) Source code (tar.gz) Footer © 2026 GitHub, Inc. Terms Privacy Security Status Community Docs Contact Manage cookies Do not share my personal information Navbar Platform Solutions Resources Open source Enterprise Pricing Other Notifications Forks: 3K Stars: 29.4K Code Issues: 271 Pull requests: 187 Discussions Actions Projects Security and quality Insights Release 22.7.9 Compare Compare Fixes Restrict socket access for daemon and plugin workers Case-insensitive comparison of workspace root Close log des

Goal Reached Thanks to every supporter — we hit 100%!

Gradle 22.7.9 Release: Daemon socket permission restriction and fix for Maven/Gradle graph analysis shell execution

More from this source