What's new in Adobe ColdFusion 2025 update 8

ColdFusion 2025 update 8 delivers native AI and LLM integration with a unified multi-provider framework, Model Context Protocol support for building and consuming AI tool interfaces, vector stores and RAG for grounding AI in your own content, passwordless passkey authentication, a rebuilt VS Code extension with Linux and Docker support, AI services monitoring in PMT, and significant language improvements including native Sets, async enhancements, and Java interoperability.

What’s new in ColdFusion 2025 Update 8

Native AI and LLM integration

ColdFusion 2025 update 8 adds first-class AI support directly into the language. You access AI providers through built-in CFML functions that integrate with your existing components and application logic — not through generic HTTP calls. A unified provider framework lets you write one set of code that works across OpenAI, Anthropic, Mistral, Google Gemini, and Ollama. Switching providers requires only a configuration change, no code refactoring. Two entry points are available: ChatModel() for simple stateless prompts, and agent() for multi-turn conversations with memory, tool calls, and guardrails.

Model Context Protocol (MCP)

MCP is an open standard interface layer between AI agents and your application. Agents can discover and use tools without unrestricted access to your codebase. ColdFusion 2025 update 8 supports MCP in both directions — as a client connecting to external MCP servers over HTTP or STDIO, and as a server exposing your own CFC functions as callable tools. The new ColdFusion documentation site also ships with a built-in MCP server for direct IDE integration.

Vector stores and RAG

ColdFusion 2025 update 8 adds a native RAG pipeline that grounds AI responses in your own content. It supports five vector stores — InMemory, Pinecone, Milvus, Qdrant, and Chroma — and offers three approaches: simpleRAG() for quick setup, agent() with INGESTION for full pipeline control in production, and documentService() for scheduled or shared ingestion jobs. A no-code ingestion UI is also available in the Administrator. Supported formats cover most common document and data types including PDF, DOCX, CSV, JSON, and remote URLs.

Security enhancements

ColdFusion 2025 update 8 adds five security improvements: native passkey support (WebAuthn/FIDO2) for passwordless sign-in, an Argon2-default password hashing API, an expanded Security Analyzer that now detects unscoped variable risks and exports PDF/CSV reports, OEM library upgrades addressing underlying vulnerabilities, and AI guardrails in agent() to filter LLM inputs and outputs via CFC-based validators.

ColdFusion Builder VS Code extension

The ColdFusion Builder VS Code extension now supports Linux and Docker as a first-class server target with full RDS and debugger support. The CFML grammar has been rebuilt to be context-aware, so a single # or <cfif> inside a <script> block no longer breaks syntax highlighting for the entire file. New code completions cover AI, Cloud, and MongoDB services with proactive deprecation warnings. The Security Analyzer ships with new rules covering cryptography, XML injection, and file injection, plus PDF and CSV report export.

AI services monitoring in PMT

PMT now includes an AI Services dashboard — enabled via Settings > Monitoring > Advanced — with seven tabs covering every layer of the AI stack: LLMs, Agents, RAG, MCP Clients, MCP Servers, Vector Stores, and a Trace Viewer. The Trace Viewer shows a full flamegraph of each AI request, making it straightforward to pinpoint which part of a pipeline is responsible for slowdowns.

Language and performance updates

ColdFusion 2025 update 8 adds native Sets with set theory operations, CompletableFuture-based async with asyncAllOf(), asyncAnyOf(), and timeout and combining methods, automatic CFML-to-Java functional interface adaptation, member functions on literals, and eight new or enhanced built-in functions. Query of Query is approximately 11x faster than the previous version, and arithmetic operator left-associativity has been corrected to match standard relational database behavior.

New documentation

The ColdFusion documentation has moved to a new platform built on Adobe Experience Manager Guides, with improved navigation and search, deeper topic coverage, and a built-in MCP server for IDE integration. Connect a supported IDE directly to the documentation using a free Adobe account.