New Update Mullvad VPN - Updates Thread

lokamoka820

lokamoka820

Level 54
Thread author
Verified
Top Poster
Well-known
Mar 1, 2024
4,327
3
15,548
5,269
Banana Republic
2026.3

Added​

  • Add port setting for LWO obfuscation.
  • Add list of recent server selections in the select location view.
  • Add context menu to locations in the select location view.
  • GotaTun is now used as the userspace WireGuard implementation on all desktop platforms, not just
    macOS. It replaces wireguard-go.

Changed​

  • Optimize LWO performance. This gives a 1.5 to 3 times speedup in our benchmarks.
  • Change default retry connection attempts. LWO is now the third default
    constraint. The relative order among the following constraints is preserved.

Linux​

  • Switch memory allocator to jemalloc to reduce fragmentation.
  • mullvad-early-boot-blocking.service now waits for local file system to be mounted
    (After=local-fs.target). This was assumed before, but not required (and is still not required).
  • mullvad-daemon now installs the same shutdown handler for SIGHUP as SIGINT and SIGTERM.
  • mullvad-daemon now exits without tearing down firewall rules on SIGUSR1.
    This is used to avoid leaking network traffic when restarting systemd service.

macOS​

  • Restart the GUI after an update if it was running.
  • mullvad-daemon now installs the same shutdown handler for SIGHUP as SIGINT and SIGTERM.

Fixed​

  • Fix duplicate "Connected"/"Disconnected" desktop notifications caused by the daemon sending
    multiple consecutive tunnel state events for the same state.
  • Fix GUI appearing stuck in "Disconnecting" state when daemon transitions directly from error to
    disconnected.
  • Fix QUIC obfuscation not always being used if relays only had IPv6 addresses for QUIC.
  • Fix a bug with Shadowsocks-based API access methods where some ciphers were configurable by
    Mullvad VPN clients while not being supported by the system service.
  • Fix IPv6 addresses not being allowed as endpoints for Socks5 and Shadowsocks API access methods.

Linux​

  • Fix 'mullvad split-tunnel clear' getting stuck.

Windows​

  • Fix potential access violation during cleanup on ARM64.
  • Fix conflicts caused by some other VPN clients that depend on Mullvad's split tunnel driver. Note
    that split tunneling still cannot be used simultaneously in different clients.
  • Fix timeout when loading split tunnel driver during boot.

Security​

  • Remove ability for renderer process to execute arbitrary binaries. This is a defence-in-depth
    measure to ensure that the renderer process does not have any capabilities beyond that of a
    regular user of the app. Affects platforms with the in-app updates feature, i.e. macOS and
    Windows. Fixes GHSA-h72f-j6r4-c3jc
Click to expand...
github.com

Release 2026.3 · mullvad/mullvadvpn-app

This release is for desktop only. Here is a list of all changes since last stable release 2026.2: Added Add port setting for LWO obfuscation. Add list of recent server selections in the select loc...
github.com github.com
 
  • Like
  • Love
Reactions: Jack, Andrew999, Khushal and 5 others
2026.4

Added​

  • Add Ukrainian as a new language in the app.
  • installer-downloader logs are aggregated by mullvad-problem-report.

Changed​

  • Update gotatun to 0.8.1.

Windows​

macOS​

  • Use arch-specific installers to deliver updates. This makes updates around 50% smaller.

Fixed​

  • Align ciphers for custom shadowsocks API access methods between clients and mullvad-daemon. Any
    existing, invalid access method is removed with a settings migration.

macOS​

  • Fix split tunneling related parse error on macOS 27.

Linux​

  • Fix issue where gotatun would fail to start on Linux systems where the
    IPv6 stack had been disabled.

Windows​

  • Fix misleading "split tunneling" error when offline.
  • Fix unhandled error: "Reached the end of the file. (os error 38)"

Security​

  • Linux and macOS: Fix management interface socket being created with less restrictive permissions
    when using MULLVAD_MANAGEMENT_SOCKET_GROUP. This addresses the advisory GHSA-p9rr-wc9m-qmwg.

Linux​

  • Plug hole in Custom DNS firewall rules for LAN resolvers.
Click to expand...
github.com

Release 2026.4 · mullvad/mullvadvpn-app

This release is for desktop only. Here is a list of all changes since last stable release 2026.3: Added Add Ukrainian as a new language in the app. installer-downloader logs are aggregated by mull...
github.com github.com
 
  • Like
  • Thanks
Reactions: Jack, Sorrento, Zero Knowledge and 2 others
Sorrento said:
Has anyone had issues with this update? I've had problems with it attempting to reinstall itself, also I shows as a continual update on update on UCheck to even when latest installed? For now I've revered to previous - Not the end of the planet though, but something not quite right :oops:
Click to expand...
Maybe ur running a beta?
 
  • Like
  • Wow
Reactions: Jack, Sorrento and Zero Knowledge
Sorrento said:
No it was in beta until recently, but its latest now, I don't use Mullvad betas, I tried installing it a couple of times & issue remains, I'll have a look gain later, I can't see anything on the web.
Click to expand...
Since it is paid, I believe it is best to contact customer support?

I am curious, do you usually update is using UCheck?
 
  • Like
  • Hundred Points
Reactions: Sorrento, Khushal, lokamoka820 and 1 other person
Sorrento said:
Has anyone had issues with this update? I've had problems with it attempting to reinstall itself, also I shows as a continual update on update on UCheck to even when latest installed? For now I've revered to previous - Not the end of the planet though, but something not quite right :oops:
Click to expand...
Did you try uninstalling the old version and doing a clean install of the new one? The release notes mention that one component has been updated and another retired, so a clean install might help.
 
  • Like
  • Applause
Reactions: Jack, Zero Knowledge, Sorrento and 2 others
Sorrento said:
I downloaded the installer, but saw it on Ucheck, I'll try a clean install I think that will be OK thanks, its usually the best way !:)
Click to expand...

And what's nice about Mullvad, is it's such a small footprint VPN so chances are the uninstall/reinstall is probably cleaner than a bigger app like Nord or Proton.
 
  • Like
Reactions: Jack, Sorrento, Zero Knowledge and 1 other person
Sorrento said:
I downloaded the installer, but saw it on Ucheck, I'll try a clean install I think that will be OK thanks, its usually the best way !:)
Click to expand...
Regarding UCheck, I disabled the options to check for WinGet and community updates after noticing it displayed misleading information about updates. Instead, I use Windows Terminal as an administrator and run the command winget upgrade to check for updates and winget upgrade --all to update the listed software.
 
  • Like
Reactions: Jack, Sorrento and Zero Knowledge
2026.5

Added​

  • Add explicit log levels for mullvad log set-level command: off, error, warn, info,
    debug and trace.

Changed​

  • Do not show dialog when rendering the map fails due to disabled GPU acceleration.
  • Clicking on the tray icon will toggle the window instead of just showing it.
  • Old mullvad log set-level command has been renamed to mullvad log set-rust-log.

Linux​

  • Make all timestamps embedded in .deb and .rpm packages deterministic by deriving them from
    the git commit being built instead of the time of the build. Required for reproducible builds.
  • Set the BUILDHOST header of .rpm packages to a fixed value instead of the hostname of the
    build machine. Required for reproducible builds.
  • De-couple mullvad-daemon.service "After=" dependencies from systemd.resolved and NetworkManager.
  • Start mullvad-early-boot-blocking.service before network-pre.target instead of basic.target.

Windows​

  • Sign the uninstaller, Electron binaries, and native modules. Some NSIS binaries are still
    unsigned.
  • Switch winreg out for windows_registry.
  • Add timeout to device cleanup tasks during installs.
  • Increase timeout on flushing DNS cache.

Removed​

Windows​

  • Stop removing leftover Wintun adapters during installation. Wintun dropped support for adapter
    pools, so this has not been necessary since 2022.5-beta1.

Fixed​

  • Reject invalid DAITA fraction limits in tunnel config responses before starting the tunnel.
  • Ignore DAITA tunnel config responses unless DAITA was requested.
  • Fix infinite loop of account checks when account ran out of time.
  • Fix IPv6 obfuscation relay selection when the relay's WireGuard endpoint only has IPv4.
  • Fix the device sometimes being incorrectly marked as revoked when the API rejects an expired
    access token.
  • Fix daemon crashing on startup when migrating settings that contain no WireGuard entry location.

Windows​

  • Preserve the app's own theme colors when Windows high contrast (forced-colors) mode is
    enabled in order to prevent toggle switches and other custom-styled controls from becoming
    invisible.
  • Fix the installer UI from looking blurry by making the installer DPI-aware.
  • Wait for the tunnel routes to become usable, and retry the connection to the tunnel config
    service if the tunnel is not ready yet. This may help with connection failures that occur
    immediately after the tunnel is set up, when using quantum-resistant tunnels or DAITA.
Click to expand...
github.com

Release 2026.5 · mullvad/mullvadvpn-app

This release is for desktop only. Here is a list of all changes since last stable release 2026.4: Added Add explicit log levels for mullvad log set-level command: off, error, warn, info, debug and...
github.com github.com
 
  • Like
  • Thanks
Reactions: Andrew999, Jack, Sorrento and 3 others
Jonny Quest said:
And what's nice about Mullvad, is it's such a small footprint VPN so chances are the uninstall/reinstall is probably cleaner than a bigger app like Nord or Proton.
Click to expand...
I'm not sure why people like Nord, you need your email to install, its full extra of additions to pay for, if you image back it needs to sign in again, refer a friend, how we doing, rate us, get a personal IP, + extra buy-ins, not for me, bloated, last time I tried it signs in slowly, simpler the better like myself.
 
  • Like
Reactions: Jack

You may also like...