1.18.1

Warning

For long-running systems: this release requires a minimum Docker version of v25.0.5. If necessary prior to Kasm upgrade, please upgrade Docker following their instructions for your distribution. A detailed explanation and instructions are available in the Kasm support article.

Note

This installation will reference the 1.18.0 Workspace registry images and not 1.18.1.

Features

• Deprecations
  • The installation and upgrade scripts now require a minimum Docker version of v25.0.5 and a minimum Docker Compose version of v2.40.2.

Bugfixes

• Fixed issue related to passing multiple smart card readers into Kasm Workspaces.
• Fixed a bug which caused the Guacamole connection proxy to stop sending logs to the database after a service token refresh.
• Applied a Guacamole change that improves error communication during user connection creation.
• Fixed bug that prevented defining custom docker container labels via Docker Run Config Override.
• Added fix to ensure that a slow database log rotation or kasm update check on the manager does not result in the manager not responding to API requests.

Rolling Bug Fixes

The following fixes have been made in the rolling tagged versions of the Kasm Workspaces container images.

• Kasm Image Bug Fixes

  • (12/05/2025) Updated KasmVNC to 1.4.1, fixing server-side enforced idle session timeout.

• Kasm Service Images

  • (10/26/2025) Added fix to ensure that a slow database log rotation or kasm update check on the manager does not result in the manager not responding to API requests.
  • (10/26/2025) Added logic to ensure that database log rotation and kasm update check does not run on multiple managers in multi-zone deployments.
  • (12/26/2025) Fixed a bug that prevented connection proxy token refresh when "API Token Refresh Leeway" was set to a very high value.
  • (12/26/2025) Fixed a bug that marked connection proxy tokens as consumed even when an error prevented token refresh.
  • (01/15/2026) Fixed Guacamole seamless clipboard overwriting by handling clipboard streams correctly.
  • (01/15/2025) Fixed a bug that prevented KasmVNC connections from working in Kubernetes deployments.
  • (01/22/2025) Fixed issue of Server Sessions remaining stuck at deleting state by implementing a safe retry logic in manager.
  • (02/19/2026) Fixed issue where clipboard-up content was truncated at 10 KB.
  • (02/09/2026) Fixed deadlock exception during agent heartbeat caused by conflicting updates to server_image_slots table.
  • (02/05/2026) Fixed PostgreSQL password parsing issues involving special characters.
  • (03/18/2026) Fixed issue where usernames were injected un-sanitized into LDAP queries allowing arbitrary lookups.

• Kasm UI

  • (11/19/2025) Fixed registry memory value not being passed to workspaces.
  • (01/28/2026) Fixed an issue with previously stored values in the Egress provider form on user dashboard.

1.19.0.e815ea

Development release 1.19.0.e815ea

1.19.0.cedb89

Development release 1.19.0.cedb89

1.19.0.a34450

Development release 1.19.0.a34450

1.19.0.649cfb

Development release 1.19.0.649cfb

1.19.0.61f6f5

Development release 1.19.0.61f6f5

1.19.0.460813

Development release 1.19.0.460813

1.19.0.293fb9

Development release 1.19.0.293fb9

1.18.0

What's new in Kasm 1.18.0

Highlights

• Updated Apache Guacamole to version 1.5.5. The changelog can be found at https://guacamole.apache.org/releases/1.5.5/ .
• Support for bulk imports of Users and Servers, through both the admin interface and developer API.
• Added support for applying labels to Servers, Agents, Server Pools and Zones.
• Added support for Including / Excluding Labels when Launching Container and Server Pool Workspaces.
• Added the ability to create a server template that can be used to enroll multiple servers using a single server enrollment token.
• User-Server Assignment in Server Pools. Users can be mapped to specific static Servers reserved for their Sessions. More here.
• Added support for Smart Card Pass-through in container-based workspaces using the Kasm Native Smartcard Client for Windows and macOS.

Features

• Usability Enhancements

  • Increased maximum supported clipboard size for RDP workspaces to 25MB.
  • Added the hostname to heartbeat logs to make it easier to identify which server or agent a log is related to.
  • Updated Docker Run Config to support variable substitution. Expanded variables for storage mapping and volume mapping to also support custom attributes 1, 2, and 3 defined for the user.
  • When deleting OpenID or SAML configs we now make it clear that this will delete any users associated with the config and include an indication of how many users will be affected. In addition you can now edit an OpenID or SAML config to see the list of users associated with the config.
  • Support for rolling tags for Kasm Docker Plugins. The Kasm start script now upgrades Kasm plugins that use rolling tags. This feature includes scripts for admin plugin management---more info here: Plugin Management.
  • Made User searching case-insensitive in both the main User list view and in Groups.
  • Servers can now be assigned to Pools from the Servers list table.
  • Added Pool (database) ID as a display column in the Pool list view. The column is visible by default.
  • Added the Experimental Features flag to global settings.
  • Added support for setting default RDP thick client properties in generated .rdp files. See "Setting RDP Thick Client Properties" under global Server Settings for supported fields and instructions.
  • Added support for injecting custom DPI and display scaling parameters (dpi, width, height) into connection_info.guac.settings during creation of RDP-based Guacamole sessions. When missing from Server connection_info settings, Kasm will auto-populate these values based on the user's browser display environment.
  • Improved /opt/kasm/bin/restart and /opt/kasm/bin/stop to remove containers by default when stopping services. Multiple mode flags are provided, use --help with each script for more information.
  • Added support docs for RHEL 10.
  • Allow admins to force persistent profiles on container Workspaces. See "Enable Workspace Persistent Profile" in Container Settings.
  • Added support for client-based automatic sizing and scaling in RDP Native client sessions. Enabled allow_scale_factor in RDP Gateway. Updated FAQ notes for forced settings: Why does the desktopscalefactor property in the .rdp file not seem to have an effect?. Note: the desktopscalefactor rdp thick client property is deprecated and will be removed soon.
  • Added general support for importing Ed25519 keys and made Ed25519 the default format for user SSH key generation.
  • Added the ability to capture logs generated from within a Kasm workspace to enable troubleshooting failure conditions. To use this feature set enable_container_logging to True in the Group Settings.
  • Added support for systemd integration. More here.

• Infrastructure Support Enhancements

  • Improved performance of orphan server cleanup on autoscale pools that have a large number of servers.
  • Added API Token Lifespan and API Token Refresh Leeway Server Settings.
  • Improved session launch times on deployments that have a large number of servers.
  • Increased the robustness of the autoscaling system and increased its efficiency when handling errors from Autoscale Providers.
  • Added authentication to improve security of Native Kasm Logging.
  • Removed the hardcoded Splunk prefix for HEC logging tokens, enabling integrations with logging endpoints that do not use the prefix. Note: extant Splunk tokens will have the prefix added if necessary during Kasm upgrade.
  • Updated the Docker Compose version used by the installer (2.38.1).
  • Added "Draining" mode to Kasm Agents.
  • Added automatic rotation of Autoscaled Kasm Agents.
  • Enhanced container healthcheck functionality with configurable timeout settings, backoffs and better error handling for service health validation.

• Kasm Image Enhancements

  • Updated all images to KasmVNC 1.4.0, providing major improvements to containerized session streaming.
  • Removed file manager on browser-based images to remove the avenue of accessing the file system and/or breaking out of the browser in browser isolation use cases.
  • Added support for Vulkan GPU acceleration for Chromium based browsers.
  • Added Debian Trixie Core image for x86_64/aarch64
  • Added Debain Trixie Desktop image for x86_64/aarch64
  • Added Fedora 41 Desktop image for x86_64/aarch64
  • Added Obsidian image for x86_64/aarch64
  • Updated GIMP to version 3, bringing the latest features and performance improvements to the GIMP workspace
  • Added Cyberbro image for x86_64/aarch64
  • Added back SuperTuxKart image to our registry

• Kasm Desktop Service

  • Fixed the installer to properly wait for existing service to stop before updating files, preventing partial upgrades.
  • Added automatic service version generation and reporting. The service version for each host is displayed in the admin UI Servers table, facilitating the management of large Windows deployments.
  • The installer now returns proper exit codes on failure, enabling autoscale scripts to detect failed deployments.
  • Fixed a bug where the service reported the system's FQDN instead of a hostname, which could cause the API service to throw an exception when the FQDN exceeded the hostname length limit of 64 characters.

• Deprecations

  • The Share Server was removed in this release, which caused several other changes beyond the removal of the share service:
    • The Redis service is no longer needed and has been removed.
    • Chat functionality has been removed from shared sessions.
      • disable_chat has been replaced with disable_viewers in the Developer API.
      • ChatSFX has been removed from the user profile.
      • chat_history_messages has been removed from group settings.
  • Removed linuxserver.io and Twingate spotlight registries as they are either no longer maintained or will be unmaintained in the near future.

• Custom Branding Enhancements

  • The label for the username input field ("Username Input Label") on the login page can now be customized through Application Branding.

• Bugfixes

  • Fixed the bug where, if a session times out on launch, the redirect to the dashboard removes the error message before it can be read.
  • Fixed the bug causing the db healthcheck to log an error message.
  • Fixed a bug where long text in a notification would flow outside of the notification box.
  • Fixed a regression bug where only the first page of users was considered when searching inside a group.
  • Improved the erro...

1.18.0.ffa416

Development release 1.18.0.ffa416