Skip to main content
The Website Services team at NHS England are testing early designs to understand how you find information. Your views will help us check our ideas work. Sign up to take part in our user research.

News

Service vulnerability in NHS Identity Agent - mandatory update required

We have identified there is a medium-severity service vulnerability with all previous versions of the NHS Identity Agent, including v2.4.5.0 and v2.4.6.0.
Date:

There is a medium-severity service vulnerability with all previous versions of the NHS Identity Agent, including v2.4.5.0, and v2.4.6.0.

Organisations are required to move to v2.4.10.0 as soon as possible, within your regular patching schedule, and no later than 12 October 2025, as this version resolves this vulnerability.

All previous versions of the Identity Agent client are retired with immediate effect.

You can:

Share this page

Latest news

NHS Digital article
26 October 2026 New smartcard expiry notifications for Smartcard Connect users

We're introducing more regular reminders that a smartcard needs to be renewed.
NHS Digital article
22 October 2026 Identity and Access Management Q3 update November 2026

NHS Digital article
18 September 2026 Update to the National Role-based Access Control (RBAC) table

Version 28 of the RBAC table is now available.
NHS Digital article
14 September 2026 Detailed plan for update of Authenticators report

The plan and dates for the improvements we announced to this report.
NHS Digital article
5 August 2026 Upcoming improvements to Care Identity Management reports

We're making changes to the reports covering authenticators and user logins.

Last edited: 11 September 2025 12:04 pm