New Update Mullvad VPN - Updates Thread

[lokamoka820]

2026.3

Added​

• Add port setting for LWO obfuscation.
• Add list of recent server selections in the select location view.
• Add context menu to locations in the select location view.
• GotaTun is now used as the userspace WireGuard implementation on all desktop platforms, not just
  macOS. It replaces wireguard-go.

Changed​

• Optimize LWO performance. This gives a 1.5 to 3 times speedup in our benchmarks.
• Change default retry connection attempts. LWO is now the third default
  constraint. The relative order among the following constraints is preserved.

Linux​

• Switch memory allocator to jemalloc to reduce fragmentation.
• mullvad-early-boot-blocking.service now waits for local file system to be mounted
  (After=local-fs.target). This was assumed before, but not required (and is still not required).
• mullvad-daemon now installs the same shutdown handler for SIGHUP as SIGINT and SIGTERM.
• mullvad-daemon now exits without tearing down firewall rules on SIGUSR1.
  This is used to avoid leaking network traffic when restarting systemd service.

macOS​

• Restart the GUI after an update if it was running.
• mullvad-daemon now installs the same shutdown handler for SIGHUP as SIGINT and SIGTERM.

Fixed​

• Fix duplicate "Connected"/"Disconnected" desktop notifications caused by the daemon sending
  multiple consecutive tunnel state events for the same state.
• Fix GUI appearing stuck in "Disconnecting" state when daemon transitions directly from error to
  disconnected.
• Fix QUIC obfuscation not always being used if relays only had IPv6 addresses for QUIC.
• Fix a bug with Shadowsocks-based API access methods where some ciphers were configurable by
  Mullvad VPN clients while not being supported by the system service.
• Fix IPv6 addresses not being allowed as endpoints for Socks5 and Shadowsocks API access methods.

Linux​

• Fix 'mullvad split-tunnel clear' getting stuck.

Windows​

• Fix potential access violation during cleanup on ARM64.
• Fix conflicts caused by some other VPN clients that depend on Mullvad's split tunnel driver. Note
  that split tunneling still cannot be used simultaneously in different clients.
• Fix timeout when loading split tunnel driver during boot.

Security​

• Remove ability for renderer process to execute arbitrary binaries. This is a defence-in-depth
  measure to ensure that the renderer process does not have any capabilities beyond that of a
  regular user of the app. Affects platforms with the in-app updates feature, i.e. macOS and
  Windows. Fixes GHSA-h72f-j6r4-c3jc

Release 2026.3 · mullvad/mullvadvpn-app

This release is for desktop only. Here is a list of all changes since last stable release 2026.2: Added Add port setting for LWO obfuscation. Add list of recent server selections in the select loc...

github.com

 

[Zero Knowledge]

Brilliant! Downloaded now!

 

[lokamoka820]

2026.4

Added​

• Add Ukrainian as a new language in the app.
• installer-downloader logs are aggregated by mullvad-problem-report.

Changed​

• Update gotatun to 0.8.1.

Windows​

• Update wireguard-nt to version 1.1. This retires the Mullvad fork at
  GitHub - mullvad/wireguard-nt: This repo is a mirror only. Official repository is at https://git.zx2c4.com/wireguard-nt.

macOS​

• Use arch-specific installers to deliver updates. This makes updates around 50% smaller.

Fixed​

• Align ciphers for custom shadowsocks API access methods between clients and mullvad-daemon. Any
  existing, invalid access method is removed with a settings migration.

macOS​

• Fix split tunneling related parse error on macOS 27.

Linux​

• Fix issue where gotatun would fail to start on Linux systems where the
  IPv6 stack had been disabled.

Windows​

• Fix misleading "split tunneling" error when offline.
• Fix unhandled error: "Reached the end of the file. (os error 38)"

Security​

• Linux and macOS: Fix management interface socket being created with less restrictive permissions
  when using MULLVAD_MANAGEMENT_SOCKET_GROUP. This addresses the advisory GHSA-p9rr-wc9m-qmwg.

Linux​

• Plug hole in Custom DNS firewall rules for LAN resolvers.

Release 2026.4 · mullvad/mullvadvpn-app

This release is for desktop only. Here is a list of all changes since last stable release 2026.3: Added Add Ukrainian as a new language in the app. installer-downloader logs are aggregated by mull...

github.com

 

[Sorrento]

Has anyone had issues with this update? I've had problems with it attempting to reinstall itself, also I shows as a continual update on update on UCheck to even when latest installed? For now I've revered to previous - Not the end of the planet though, but something not quite right

 

[Divine_Barakah]

Has anyone had issues with this update? I've had problems with it attempting to reinstall itself, also I shows as a continual update on update on UCheck to even when latest installed? For now I've revered to previous - Not the end of the planet though, but something not quite right

Maybe ur running a beta?

 

[Sorrento]

No it was in beta until recently, but its latest now, I don't use Mullvad betas, I tried installing it a couple of times & issue remains, I'll have a look gain later, I can't see anything on the web.

 

[Divine_Barakah]

No it was in beta until recently, but its latest now, I don't use Mullvad betas, I tried installing it a couple of times & issue remains, I'll have a look gain later, I can't see anything on the web.

Since it is paid, I believe it is best to contact customer support?

I am curious, do you usually update is using UCheck?

 

[Zero Knowledge]

Since it is paid, I believe it is best to contact customer support?

I am curious, do you usually update is using UCheck?

Yeah they will help! I use UCheck but never update in the program always direct download from author site.

 

[lokamoka820]

Has anyone had issues with this update? I've had problems with it attempting to reinstall itself, also I shows as a continual update on update on UCheck to even when latest installed? For now I've revered to previous - Not the end of the planet though, but something not quite right

Did you try uninstalling the old version and doing a clean install of the new one? The release notes mention that one component has been updated and another retired, so a clean install might help.

 

[Sorrento]

I downloaded the installer, but saw it on Ucheck, I'll try a clean install I think that will be OK thanks, its usually the best way !

 

[Jonny Quest]

I downloaded the installer, but saw it on Ucheck, I'll try a clean install I think that will be OK thanks, its usually the best way !

And what's nice about Mullvad, is it's such a small footprint VPN so chances are the uninstall/reinstall is probably cleaner than a bigger app like Nord or Proton.

 

[lokamoka820]

I downloaded the installer, but saw it on Ucheck, I'll try a clean install I think that will be OK thanks, its usually the best way !

Regarding UCheck, I disabled the options to check for WinGet and community updates after noticing it displayed misleading information about updates. Instead, I use Windows Terminal as an administrator and run the command winget upgrade to check for updates and winget upgrade --all to update the listed software.