We use cookies to improve your browsing experience. By continuing to use this website, you agree to our use of cookies. Learn more in our Cookie Policy
Home > Blog > Release Notes > arkkvm-ota-release-notes-v0-2-26061815

ArkKVM OTA Release Notes (v0.2.26061815)

By Jaymin June 22nd, 2026 59 views

📌 Executive Summary

This major update introduces experimental Tailscale Mesh VPN integration and a completely reengineered USB core stack featuring dynamic loading, customizable descriptors, and advanced power management to enhance S3 sleep wake-up compatibility. It also delivers crucial security patches for open-redirect and XSS vulnerabilities, alongside over 30 stability and UX fixes across network configuration, virtual media mounting, and HID (keyboard/mouse) reliability in extreme DevOps and homelab scenarios.

🛠️ New Features & Enhancements

1. Reengineered Dynamic USB Stack & Virtual Media

  • Dynamic USB Stack Reloading: Modify USB configurations on the fly without rebooting the entire KVM appliance.
  • Custom USB Device Identifiers: Advanced users can now customize Vendor ID, Product ID, and three other core descriptors directly from the UI, with persistent backend synchronization.
  • Enhanced Legacy & OS Compatibility: Introduced a new"Keyboard & Relative Mouse"emulation mode to drastically improve pointer accuracy and input reliability withinBIOS/UEFI settings, GRUB bootloaders, and pure Linux TTY environments where modern OS mouse drivers are not yet loaded.
  • S3 Sleep Wake-Up Support: Implemented the USB Low Power Mode protocol, allowing remote keyboard/mouse inputs to successfully wake target hosts from S3 sleep.

    ⚠️ Note: Modern Standby (AoAC) wake-up compatibility is currently under analysis and will be addressed in a future release.

  • Flexible Virtual Media: Supports dynamically selecting between CD/DVD-ROM or DISK emulation modes when mounting virtual media.

2. Remote Networking (Tailscale Mesh VPN)

  • Native Tailscale Integration: Seamlessly log in and connect ArkKVM to your Tailscale overlay network for secure, cross-regional, and firewall-traversing remote management.

3. Security Hardening

  • Vulnerability Fixes: Resolved critical security exploits regarding Open Redirect and DOM-Based XSS (Cross-Site Scripting) to ensure web console integrity.

🐛 Bug Fixes & Stability Improvements

1. Virtual Media & OS Deployment

  • IMG Booting in Disk Mode: Fixed a severe bug where .img images mounted via URL in Disk Mode failed to register as bootable USB devices in the target host's BIOS or OS.

  • Repository Errors: Resolved the "No repository found" error during openSUSE Tumbleweed NET installations.

  • UX Improvements: Added friendly status prompts and visual greying-out of the top-left icon when virtual media is unavailable due to underlying system conflicts.

2. Session Control & Cloud Connectivity

  • Session Preemption & Dialogs: Fixed instances where "Session Preemption" alerts failed to trigger during multi-tab/multi-browser concurrent access or were visually blocked by DHCP renewal prompts.

  • Cloud Client Stability: Fixed a login redirection loop, occasional web white-screens, and UI freezes on the "Device Name" page under test environments.

  • Input Validation: Added real-time frontend validation for API/App URLs to prevent buttons from getting stuck in an infinite loading state when invalid links are entered.

3. System Maintenance & OOBE

  • OTA Cleanup & Tracking: Fixed an issue where downloaded OTA upgrade packages were not deleted post-reboot. Corrected the update progress bar behavior and fixed a bug where daily auto-update checks failed to trigger.

  • OOBE Blockers: Resolved a critical crash during the final step ("Get Started") of the OOBE setup wizard when active remote file transfers, virtual mounts, or microphones were enabled.

4. General UI/UX Polish

  • Input Behavior: Fixed a bug where scrolling the page would erratically change un-saved VLAN IDs. Resolved a redirection failure where the browser remained stuck on the old IP page after applying successful static IP changes.

  • Contextual Component Greying: Selecting the "Keyboard & Mouse" device profile now correctly and synchronously greys out the microphone button and top-left USB indicators.

  • Text Corrections: Updated UI strings for better clarity (e.g., corrected "Refresh" to "Restore Defaults" under custom identifiers; fixed typo to "Keyboard & Relative Mouse").

💡 Deployment & Upgrade Guide

  1. Navigate to System -> OTA Update while connected to the internet to trigger the update.

  2. Hardware Re-initialization Notice: To apply the new USB stack and custom descriptors, the KVM will automatically reload its USB emulation layer post-update. Your target host might experience a brief USB disconnect/reconnect flash (approx. 1–2 seconds); this is normal.

  3. Tailscale Optimization: If utilizing the new Tailscale feature, it is highly recommended to disable Key Expiry for the ArkKVM node within your Tailscale Admin Console to ensure uninterrupted, long-term remote access.

Security Advisory: Open Redirect and DOM-Based XSS Vulnerability in ArkKVM
Previous
Security Advisory: Open Redirect and DOM-Based XSS Vulnerability in ArkKVM
Read More
ArkKVM is Now Fully Open Source: Completing the Stack
Next
ArkKVM is Now Fully Open Source: Completing the Stack
Read More