FOSS Applications

KeePassXC 2.8.0-beta1 adds Wayland support and security fixes

Key Takeaway

KeePassXC 2.8.0-beta1 introduces Wayland Auto-Type support, native Arm64 builds for Windows, and addresses several security vulnerabilities.

Summary

The KeePassXC password manager has released its 2.8.0-beta1 pre-release. This update features a major migration to Qt 6 and introduces significant platform-specific improvements, including Wayland support via XDG Desktop Portals on Linux and native Arm64 support for Windows. The release also addresses multiple security vulnerabilities, including a use-after-free bug in KDB file imports.

Technical changes in KeePassXC 2.8.0-beta1

  • Major Migration: The codebase has migrated to Qt 6.
  • Linux Improvements: Added Wayland Auto-Type support using XDG Desktop Portals and implemented Polkit for Quick Unlock.
  • Security Fixes: Patched CVE-2026-69150 (use-after-free in KDB imports) and addressed several pending CVEs regarding browser extension injection and out-of-bounds writes.
  • SSH Agent: Added support for generating RSA, ECDSA, and Ed25519 keys.
  • Windows: Introduced native Arm64 builds.
  • macOS: Added support for device password Quick Unlock when Touch ID is unavailable.

Why it matters

The migration to Qt 6 and improved Linux desktop integration ensures the application remains compatible with modern desktop environments and security standards.

Original reference: github.com →