Known Issue: FME Form 2026.2 and backported versions fail to open after an invalid JSON security override is applied

Liz Sanderson
Liz Sanderson
  • Updated
Known Issue ID FMEFORM-38004
Feature FME Workbench
Product FME Form
Versions Affected

FME Form versions:

  • 2026.2, 2026.2.1
  • 2026.1.0.1, 2026.1.1.1, 2026.1.2.1
  • 2025.2.0.1, 2025.2.1.1, 2025.2.2.1, 2025.2.3.1, 2025.2.4.2
  • 2025.1.0.2, 2025.1.1.1, 2025.1.2.1, 2025.1.3.5
  • 2025.0.0.1, 2025.0.1.1, 2025.0.2.1, 2025.0.3.2
  • 2024.2.0.1, 2024.2.1.1, 2024.2.2.1, 2024.2.3.1, 2024.2.4.1, 2024.2.5.2
Status

Resolved

2026.3

Issue

In FME 2026.2 and specified versions containing backported security updates, saving invalid JSON as a security override may throw an error that prevents FME Form from launching: 

engineconfig.json: malformed JSON: [json.exception.parse_error.101] parse error at line 9, column 10: syntax error while parsing object - unexpected string literal; expected '}'

 

Cause

Malformed JSON is not validated prior to being saved, so a syntax error in the override is only caught at startup.

This applies to the updated FME Form versions with backported security fixes, per the advisory: 

  • 2026.2, 2026.2.1
  • 2026.1.0.1, 2026.1.1.1, 2026.1.2.1
  • 2025.2.0.1, 2025.2.1.1, 2025.2.2.1, 2025.2.3.1, 2025.2.4.2
  • 2025.1.0.2, 2025.1.1.1, 2025.1.2.1, 2025.1.3.5
  • 2025.0.0.1, 2025.0.1.1, 2025.0.2.1, 2025.0.3.2
  • 2024.2.0.1, 2024.2.1.1, 2024.2.2.1, 2024.2.3.1, 2024.2.4.1, 2024.2.5.2

 

Workaround

FME 2026.2+ (All Platforms): Clear the Override from an Elevated Command Prompt

In the CLI command prompt using fme.exe in administrator mode: 

fme.exe APPLY_SETTINGS SYSTEM Hardening/HardeningPolicyConfigOverride ""

 

FME 2026.2+ (Windows Only): Delete/Modify Relevant Registry Key

Alternatively, in the Windows Registry, remove the JSON override or modify it to be valid JSON.

 

Earlier Versions: Edit engineconfig_patch.json file

Navigate to <FME_HOME>/res/engineconfig_patch.json and edit the file to contain a valid security override JSON object, or delete it if no security override is necessary. For assistance with applying overrides, please contact Support.

 

Related Issues

Known Issue: FME Flow 2026.3.x and backported versions fail to re-register FME engines after an invalid JSON security override is applied

Was this article helpful?

We're sorry to hear that.

Please tell us why.