# Chef Automate 4.13.520 Released!

**URL:** <https://discourse.chef.io/t/chef-automate-4-13-520-released/25009>\
**Category:** Chef Release Announcements\
**Created:** [August 27, 2026, 5:28pm UTC](https://discourse.chef.io/t/chef-automate-4-13-520-released/25009 "2026-08-27T17:28:30Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![IanMadd](https://sea2.discourse-cdn.com/flex016/user_avatar/discourse.chef.io/ianmadd/32/3293_2.png) [@IanMadd](https://discourse.chef.io/u/IanMadd)\
**Post date:** [August 27, 2026, 5:28pm UTC](https://discourse.chef.io/t/chef-automate-4-13-520-released/25009/1 "2026-08-27T17:28:30Z")

</div>

We are delighted to announce the availability of Chef Automate 4.13.520.

## Security

- Resolved multiple security vulnerabilities across Chef Automate core services.
- Fixed a potential SQL injection vulnerability to ensure input sanitization and secure query execution.

## Bug fixes

- The `chef-automate package-cleanup` command now correctly preserves required Automate HA management packages during cleanup. Previously, it built the package whitelist only from actively running Habitat services, causing essential non-running packages such as `automate-ha-ctl` to be removed and breaking backend CLI commands.