Skip to main content
Version: Developer

What's new in Kasm 1.18.1

warning

For long-running systems: this release requires a minimum Docker version of v25.0.5. If necessary prior to Kasm upgrade, please upgrade Docker following their instructions for your distribution. A detailed explanation and instructions are available in the Kasm support article.

info

This installation will reference the 1.18.0 Workspace registry images by default.

Features

  • Deprecations
    • The installation and upgrade scripts now require a minimum Docker version of v25.0.5 and a minimum Docker Compose version of v2.40.2.

Bugfixes

  • Fixed issue related to passing multiple smart card readers into Kasm Workspaces.
  • Fixed a bug which caused the Guacamole connection proxy to stop sending logs to the database after a service token refresh.
  • Applied a Guacamole change that improves error communication during user connection creation.
  • Fixed bug that prevented defining custom docker container labels via Docker Run Config Override.
  • Added fix to ensure that a slow database log rotation or kasm update check on the manager does not result in the manager not responding to API requests.

Rolling Bug Fixes

The following fixes have been made in the rolling tagged versions of the Kasm Workspaces container images.

  • Kasm Workspace Images

    • (12/05/2025) Updated KasmVNC to 1.4.1, fixing server-side enforced idle session timeout.
    • (04/20/2026) Added an optional wrapper for bwrap in Kali Rolling Desktop and Trace Labs images to prevent the black screen issue for high-privilege sessions. See the KB article for more info.
    • (06/05/2026) Fixed an issue where session recording was not working with the KasmOS image.
    • (08/01/2026) Added Ollama to AnythingLLM to support the built in AnythingLLM model engine for local AI use cases.
    • (08/01/2026) Fixed an issue with the v4l2loopback module where it would fail to build on kernel version 7.
  • Kasm Service Images

    • Security Fixes
    • (10/26/2025) Added fix to ensure that a slow database log rotation or kasm update check on the manager does not result in the manager not responding to API requests.
    • (10/26/2025) Added logic to ensure that database log rotation and kasm update check does not run on multiple managers in multi-zone deployments.
    • (12/26/2025) Fixed a bug that prevented connection proxy token refresh when "API Token Refresh Leeway" was set to a very high value.
    • (12/26/2025) Fixed a bug that marked connection proxy tokens as consumed even when an error prevented token refresh.
    • (01/15/2026) Fixed Guacamole seamless clipboard overwriting by handling clipboard streams correctly.
    • (01/15/2025) Fixed a bug that prevented KasmVNC connections from working in Kubernetes deployments.
    • (01/22/2025) Fixed issue of Server Sessions remaining stuck at deleting state by implementing a safe retry logic in manager.
    • (02/19/2026) Fixed issue where clipboard-up content was truncated at 10 KB.
    • (02/09/2026) Fixed deadlock exception during agent heartbeat caused by conflicting updates to server_image_slots table.
    • (02/25/2026) Fixed unhandled exception when disabling storage mappings.
    • (03/05/2026) Fixed issue where VM creation would fail on Harvester 1.7 due to missing limits spec.
    • (03/12/2026) Fixed issue where servers with utf8 credentials could cause workspace launch failures.
    • (02/18/2026) Fixed issue where the RDP HTTPS Gateway would send keepalives for sessions it was not associated with
    • (02/05/2026) Fixed PostgreSQL password parsing issues involving special characters.
    • (03/17/2026) Web manifest changed to use absolute URLs rather than relative ones as Chrome appeared to get lost occasionally.
    • (03/17/2026) Fixed performance degradation when using the get_users public API with large user datasets.
    • (03/18/2026) Fixed issue where usernames were injected un-sanitized into LDAP queries allowing arbitrary lookups.
    • (04/28/2026) Fixed issue with webcam not recovering after being turned off and back on again without reloading.
    • (04/28/2026) Fixed issue with the microphone state getting out of sync with what it should be if toggled too quickly.
    • (04/07/2026) Fixed issue with reset persistent profile not working as NFS submounts were not propagated into the helper container.
    • (05/19/2026) Fixed multiple minor bugs in AWS provider module, regarding broken logging and crash handling.
    • (05/21/2026) Fixed issue with maximum simultaneous sessions settings in server where connection_type is ssh.
    • (06/03/2026) Fixed issue where end users selecting a deployment zone in an pool for servers was not respected.
    • (07/01/2026) Made the API server request thread pool size configurable by setting thread_pool (defaults to 20) under server in api.app.config.yaml, and added optional periodic logging of thread-pool utilization by setting thread_pool_log_interval (in seconds; 0 disables) in the same file.
    • (07/10/2026) Fixed backend validation for workspace file-download requests.
    • (07/31/2026) Improved logging and exception handling issues with autoscale VM providers.
    • (08/10/2026) Fixed kasm_agent restart loop caused by ghost Docker containers during clear_stale_mounts.
    • (08/10/2026) Fixed an issue where the Session Casting configuration's "Restrict to Referrers" setting did not deny requests when the Referer header was missing.
    • (08/18/2026) Fixed issue where Digital Ocean autoscale provisioning failed due to changes in the Digital Ocean API.
  • Kasm UI

    • Security Fixes
    • (11/19/2025) Fixed registry memory value not being passed to workspaces.
    • (01/28/2026) Fixed an issue with previously stored values in the Egress provider form on user dashboard.
    • (03/11/2026) Fixed some issues with file mapping, including toggles not working on file uploads, and stale data when editing a file map.
    • (06/02/2026) Fixed search functionality in the Users table under the Groups section.
  • Guacamole

    • (03/20/2026) Fixed issue running Guacamole with a cluster size of 1
    • (05/09/2026) Fixed an issue where the connection proxy recording pipeline failed to encode .guac segments after the first successful upload.