CloudBeaver Community
Cloud Database Manager - Community Edition.
CloudBeaver is a web server that provides a rich web interface. The server itself is a Java application, and the web part is written in TypeScript and React.
It is free to use and open-source (licensed under Apache 2 license).
Documentation
Run in Docker
Demo server
You can see a live demo of CloudBeaver server here: https://demo.cloudbeaver.io
Database access instructions
Changelog
26.2.4 2026-11-02
- AI Assistant:
- Added the ability to clone AI profiles with all settings and saved tokens.
- Added automatic saving of the last selected AI profile as the user’s default for new chats.
- Improved AI profile descriptions, tooltips, and form save behavior.
- Added Grok subscription authentication for user AI profiles.
- Fixed total row count calculation for queries generated with the @ai command.
- Fixed token usage reporting for Claude models.
- Administration:
- Added connection-level AI context settings for administrators to control which database objects can be included in AI context.
- Added the enabled-by-default Reset credentials on target change setting to prevent saved credential reuse when a connection’s host, URL, or network route changes. An administrator can turn off this setting to restore legacy credential reuse for trusted environments where every user who can edit connections is also trusted with the stored credentials.
- SQL Editor:
- Added a SQL Editor preference into user preferences to control whether blank lines separate SQL statements.
- Fixed invalid characters in default script names generated by Show SQL.
- Accessibility:
- Fixed accessibility labels and tab structure in the navigator, SQL Editor, and menus.
- General:
- Added the ability to delete multiple selected items at once in the Database Navigator and Scripts.
- Added a SQL Editor setting to control whether blank lines separate SQL statements.
- Fixed API token authentication failing when Oracle is used as the internal database.
- Databases:
- Databend: Removed the connector from Community due to a security risk in the driver libraries.
- DuckDB: Updated the driver to version 1.5.6.0.
- Oracle: Fixed missing constraint columns when "Always use DBA views" is enabled.
- SQL Server: Index key columns are now displayed before INCLUDE columns in the DDL.
- Security:
- Updated the bundled Java runtime to protect TLS connections from certificates affected by the eMudhra CA key compromise.
- Renamed the database password change setting and moved Change current database password to the Manage menu.
- Fixed file uploads checking SQL editing permission instead of filesystem editing permission.
- Fixed high vulnerabilities in the Bouncy Castle library (CVE-2026-18036, CVE-2026-71891, CVE-2026-71889, CVE-2026-71888, CVE-2026-71887, CVE-2026-71886, and CVE-2026-85515). The library was updated to version 1.86.
- Updated frontend dependencies, including Subscript, Execa, concurrently, happy-dom, and jest-dom, to address vulnerabilities in outdated libraries.
26.2.3 2026-10-19
- AI Assistant:
- Added support for authenticating user-created OpenAI profiles with a ChatGPT subscription via a browser or device code.
- Data Editor
- Fixed an issue where setting a cell to NULL from the context menu caused the table to scroll to the top when the Value panel was open.
- SQL Editor:
- Fixed an issue where using a Chinese IME in string literals inserted raw Pinyin characters, potentially replacing or removing existing text.
- Navigator:
- Fixed an issue where folders moved using drag-and-drop were not synchronized between browser tabs.
- Added the ability to create new folders from the context menu for the Scripts tabs.
- Accessibility:
- Added the ability to copy content from the administration tables using the standard copying shortcut.
- Security:
- Fixed authorization checks to prevent users from accessing or modifying resources in shared projects without permission.
- Fixed one critical and three high vulnerabilities in the shell-quote, source-map-js, @graphql-tools/utils, and @graphql-tools/executor-legacy-ws libraries (CVE-2026-102422, CVE-2026-93749, CVE-2026-104852, and CVE-2026-103921). The libraries were updated to versions 1.12.0, 1.2.2, 12.0.3, and 1.1.37, respectively.
- Fixed three high vulnerabilities in the @fastify/busboy and probe-image-size libraries (GHSA-x8mw-p69m-v3mx, GHSA-xjh9-v7x6-24jw, and GHSA-gjj5-9665-rwrc). The libraries were updated to versions 3.2.2 and 7.4.0, respectively.
- Databases and drivers:
- Clickhouse: Added the ability to rename tables from the Navigator tree.
- PostgreSQL:
- Fixed bulk imports that mishandled literal backslashes or custom CSV escape characters
- Fixed SQL formatting for the @? operator
This is the beginning of the README. Read the rest at the original. Read the full README ↗
