Appwrite 2.6.1 release notes, 21 Oct 2026

Appwrite 2.6.1 is a precautionary maintenance release that moves the runtime to PHP 8.5.12. It ships with the same 1.2.97 self-hosted Console as 2.6.0, has no schema changes, and upgrading from 2.6.0 only replaces the images.

Security

Update PHP from 8.5.11 to 8.5.12 through appwrite/base 2.2.6 (appwrite/docker-base#125). PHP 8.5.12 fixes CVE-2026-109618 and CVE-2026-109619 ("PHP2Shell"). Appwrite is not affected by either one: it serves requests through Swoole rather than PHP's web SAPIs (mod_php, PHP-FPM, CGI). This release keeps the runtime on the patched version anyway.

Install

docker run -it --rm \
    --volume /var/run/docker.sock:/var/run/docker.sock \
    --volume "$(pwd)"/appwrite:/usr/src/code/appwrite:rw \
    --entrypoint="install" \
    appwrite/appwrite:2.6.1

Upgrade

Upgrading from 2.6.0 uses the same command with --entrypoint="upgrade", then run the migration, which has nothing to change for this release:

cd appwrite
docker compose exec appwrite migrate

Back up your data first.

Contributors

Thank you to everyone who contributed to 2.6.1:

@loks0n @ChiragAgg5k

Full Changelog: https://github.com/appwrite/appwrite/compare/2.6.0...2.6.1