Mage-OS October Update – Security, AI and What's Next
· mage-os-team · Updates · 3 min read
Mage-OS Monthly Update
October was a busy month for the Mage-OS community. We released an important security update, explored new AI possibilities, made progress towards Mage-OS 4.0, and, of course, had our fair share of spooky moments in the PHP ecosystem.
Here’s a look at what happened this month.
Mage-OS 3.6.0 – Security Release
On October 14, we released Mage-OS 3.6.0, an important security release based on Adobe’s October isolated patch (APSB26-153).
The release addresses critical security vulnerabilities, including one rated CVSS 10.0. It also includes seven bug fixes and updates to two bundled add-ons.
All Mage-OS 3.x installations should upgrade to this release.
Read more about the release and its security fixes in our release announcement.
Mage-OS 4.0 is getting closer
Preparations for Mage-OS 4.0 are in full swing.
The community is working on several improvements and integrations, including:
- SEO, AEO and FAQ modules
- MSI improvements
- Lazy-loading compatibility fixes
- Additional Magento Open Source improvements, including GraphQL and caching enhancements
We’re also bundling Mago with Mage-OS 4.0. More on that below.
Meet Mago – your new admin assistant
Mago was introduced at Meet Magento and presented to the Mage-OS community during our technical meeting.
The assistant includes Mage-OS documentation as a knowledge source, can retrieve information, and can perform certain actions with permission.
There is also exciting work happening around MCP integration through an additional Magento 2 connector, opening up even more possibilities.
You can find Mago on GitHub.
More AI developments
The Mage-OS AI Base module continues to evolve. Version 1.1.0 was released this month, bringing further development to AI capabilities within the Magento ecosystem.
Security: October brought some scares
Let’s be honest, PHP brought some unexpected Halloween surprises this month.
PHP2Shell certainly got everyone’s attention. The security issue triggered discussions and work across the ecosystem, with developers checking their systems, updating PHP versions and Docker containers, and working through the implications.
The Mage-OS community has also been looking into a security vulnerability in the Mage-OS Blog module. David Lambauer is working on this through a GitHub Security Advisory and a fork.
Security work isn’t always the most exciting part of open source, but it’s certainly one of the most important.
Fortunately, not every Halloween story needs a horror ending.
Long-Term Support is taking shape
Work on the Mage-OS LTS release process is progressing.
The tooling is ready for review, and patch preview releases have already been generated for recent security updates.
The next steps include merging the remaining pull requests, documenting the process in a runbook, and running background LTS releases before a formal announcement.
More details will follow as the process matures.
Join the Mage-OS community
Want to get involved, follow development, or help shape what’s coming next?
- Explore the Mage-OS Dashboard.
- Join feature and RFC discussions.
- Check out Mago.
- Join the Mage-OS community on Discord.
Our next marketing meeting takes place on November 3. If you’re interested in helping spread the word about Mage-OS, you’re welcome to join us!
That’s October wrapped up. Here’s to fewer security nightmares, more open-source innovation, and an exciting November.
Powered by Strong Partnerships
We are proud to collaborate with industry leaders who believe in open source and help accelerate the Mage-OS ecosystem.
Silver Partners
Bronze Partners
Why Partner With Us?
Becoming a Mage-OS partner means more than visibility. It means shaping the future of open source commerce, gaining early insights into technical developments, and showcasing your brand to a global audience of merchants, developers, and agencies.
