v3.5.0 v3.5.4

low risk

nari-labs/dia2Jul 31, 2026 → Aug 1, 20261 day between releases

What's New

Addresses security ACL bypass and database role sync issues in v3.5.0

Improvements

  • Security hardening for Address Book ACLs
  • Database migration for legacy role constraints

Bug Fixes

  • Address Book ACL bypass vulnerability
  • Legacy SQLite role CHECK blocking sync
  • MeshAgent .msh file size formatting

Upgrade Notes

Requires a panel update to apply Go server and console changes. The Go server performs a database migration to rebuild user tables with updated role constraints; restart the server to complete the process.

The Two Releases

v3.5.0

BetterDesk 3.5.0

Jul 31, 2026· 3 months ago

This major release introduces a new optional Beta UI (UX 3.5) while maintaining the classic interface as the default, adds support for FreeBSD, and resolves several OIDC and Docker-related issues.

Full release notes
v3.5.4

BetterDesk 3.5.4

Aug 1, 2026· 3 months ago

This release focuses on security and stability improvements, specifically addressing an Address Book ACL bypass vulnerability and fixing legacy database role synchronization issues.

Full release notes