Releases: cloudreve/cloudreve
Releases · cloudreve/cloudreve
4.15.0
- Added: [Pro] Generate direct links for directories, allowing access to all child files by appending their relative paths to the directory's direct link URL (#3174)
- Added: Set a specific file application as the global default opening method (#2304)
- Added: Batch edit custom props for multiple selected files in the list view (#3322)
- Fixed: Automatically generated client secrets were invalid when creating OAuth applications (#3337)
- Fixed: Page crashed when the number of deleted files exactly matched the pagination size (#3329)
- Fixed: [Pro] Gift code usage status did not roll back after a verification failure (#3339)
- Fixed: Incomplete file list displayed on the web interface under certain conditions when using the Windows client (#3330)
- Fixed: Directories were incorrectly imported as 0-byte files under certain storage policies (#3347 @YUDONGLING)
- Fixed: Unable to delete users under specific edge cases (#3354)
- Fixed: Incorrect API response when batch deleting shares (#3350 @scholar7r)
- Fixed: Inconsistent text descriptions on the settings page (cloudreve/frontend#328 @YUDONGLING)
4.14.1
4.14.0
- Full-Text Search and AI Semantic Search (#2895)
- New: Edit custom file propertities directly in the list view (#3254)
- New: Rename files directly in list or grid view
- New: Option to configure clicking behavior on folders (enter folder or select folder) (#3266)
- New: Rename files using the F2 shortcut (#3266)
- Fix: Newly created OAuth applications missing
openidscope (#3274) - Fix: [Pro] Storage policy relocation tasks in the admin dashboard fail to display the policy name (#3197)
- Improvement: Admin dashboard Blob list tooltips no longer block the mouse cursor (cloudreve/frontend#326 @YUDONGLING)
- Improvement: Added
v4tag to Docker images (#3284)
4.13.0
Caution
This release contains critical security updates for CVE-2026-25726; please update as soon as possible.
Updating to this version will cause the following unavoidable side effects:
- All active login sessions will be invalidated;
- Existing direct links for non-redirected local storage policies will become invalid (URLs containing
?sign=xxx); - Other signed temporary links that have not yet expired will become invalid (URLs containing
?sign=xxx).
- If your database was first initialized with Cloudreve version >= 4.10.0, this security vulnerability does not affect you.
- Specific details will be disclosed 60 days after this release.
- Fix: Use cryptographically secure random number generator for sensitive fields (Kudos to @orenyomtov)
- Improvement: File list tooltips should no longer obstruct downward mouse movement (#3170)
- Improvement: Performance optimization for drag-selection of files
- Fix: Unable to drag and drop files in list view (#2937)
- Fix: Inaccessible direct links for newly created empty files (#3239)
- Fix: 500 error when uploading to SeaweedFS S3 storage policies (#3265)
- Fix: OAuth endpoint handling of
code_challengeinconsistent with documentation (#3261)
4.12.1
- Third-party App OAuth Integration
- New [Pro] Enable "Share" permission for other users, allowing them to create new share links (#3028)
- New Support for share card thumbnails and descriptions when sending share links on social media platforms (#3234 @WittF)
- New Admin panel option to toggle file event push notifications and adjust detailed parameters
- New Desktop client promotion page
- Improved File Blob URLs now return complete CORS Headers (#3193)
- Improved Built-in thumbnail generator now supports transparency channels (#3207 @YUDONGLING)
- Fixed Downloads of files within shared directories were not being counted in statistics (#3196 @YUDONGLING)
- Fixed File download prompt failed to appear when Tencent Cloud COS had "Do not sign for CDN" enabled (#3202 @YUDONGLING)
- Fixed Dark mode editing issue for file icons in the admin panel (cloudreve/frontend#325 @YUDONGLING)
4.11.1
4.11.0
- Added Polish localization (#3136 @LukaszOn)
- Added Option to enable pprof HTTP service in the configuration file
- Added Unsaved changes confirmation dialog for Text and Markdown editors (cloudreve/frontend#322 @YUDONGLING)
- Added Endpoint for real-time server-side file change events (reserved for desktop client)
- Added Support for switching the current user via URL Query parameter (reserved for desktop client)
- Added Optional ETag verification when creating upload sessions (reserved for desktop client)
- Fix Abnormal filenames for Kingsoft Cloud KS3 downloads (#3057 @YUDONGLING)
- Fix Inconsistent path separators for thumbnail Blobs on Windows (#3116 @YUDONGLING)
- Fix Security vulnerabilities reported by Kolega.dev
- Fix File size not updated after version rollback
- Fix Admin panel rendering error when duplicate names exist for nodes or storage policies (cloudreve/frontend#320 @YUDONGLING)
- Optimize Memory usage when importing large numbers of files externally (#3059)
- Optimize Upload session creation to automatically inherit parent directory's storage policy if unspecified
- Optimize Wording of some text descriptions (cloudreve/frontend#321 @xb2016)
- Optimize Text description for download speed limit settings (cloudreve/frontend#323 @YUDONGLING)
4.10.1
- Fix OSS callback failed with error code 401 (#3038)
- Fix rendering error when multiple storage policy have same name (cloudreve/frontend#319 @YUDONGLING)
4.10.0
- Added File Encryption feature (#1377)

- Added configuration for thumbnail Blob storage path (#3030 @YUDONGLING)
- Added play once mode to music player (cloudreve/frontend#315 @WittF)
- Added option to delete recently used tags in context menu
- Optimized adaptation to new OSS signature maximum TTL (#2979 @YUDONGLING)
- Optimized music player to allow switching songs during single loop (cloudreve/frontend#316 @WittF)
- Optimized: For supported storage policies, enable parallel chunked upload by default
- Fixed triggering upload when dragging images in Excalidraw (#3016)
- Fixed Excalidraw not correctly recognizing screen size in some cases (#3017)
- Fixed invalid multi-tag search (#3027)
- Fixed unable to upgrade from community to Pro version when using PostgreSQL (#3022)
- Fixed OnlyOffice 9 clipboard not working (#2943)









