Known issues for

Release 6.4.1

Splunk SOAR version 6.4.1 includes the following known issues.

Date filed	Issue number	Description
2025-05-29	PSAAS-23968	Required Join settings ignored due to switch from functionName to id in notRequiredJoins list Workaround: After upgrading to 6.4.1.353, if any unexpected block join behavior is noticed during playbook execution, review vpe blocks & re-establish any existing join settings to ensure the proper join values are saved. Additionally, using the playbook JSON as a reference to find instances of Template:NotRequiredJoins that use block function names instead of ids could speed up the process.
2025-05-28	PSAAS-23958	Webhooks querystring parameters are parsed incorrectly
2025-05-19	PSAAS-23626	Playbook prompt blocks: Response is required, regardless of "Required" field setting
2025-04-16	PSAAS-23000, PSAAS-22994	Join Settings are not copied in copy paste
2025-04-01	PSAAS-22727	action_result.summary.responder_email datapath is not populated
2025-03-17	PSAAS-22485	Usernames containing commas (,) cause prompt block execution failures in playbooks
2025-01-16	PSAAS-21440	VPE: Blocks in top right area of the canvas cannot be selected when there is an error message Workaround: Move the canvas to a location on your screen where blocks are not obscured by error messages. To move the canvas, select a blank area of the canvas and drag it to another location on your screen.
2024-02-22	PSAAS-16477	Podman does not currently work with redirected image URLs due to Docker Hub authentication token changes Workaround: Manually change the image: line in docker-compose.yaml to point to docker.io/phantomsaas/automation_broker:<$SOAR_VERSION>.