# Appwrite 1.9.9 — Release & Upgrade Intelligence
- **Product:** Appwrite (https://appwrite.io)
- **Version:** 1.9.9
- **Released:** Oct 21, 2026
- **Impact Score:** 5/10
- **Breaking Changes:** Not verified
- **Canonical Analysis:** https://changelogs.us/appwrite/updates/1.9.9/

## Executive Summary (TL;DR)
Appwrite 1.9.9. Source highlight: Appwrite 1.9.9 is a precautionary maintenance release for self-hosted deployments on the 1.9 line. It moves the runtime to PHP 8.5.12. It retains Console 8.7.37 for compatibility with the 1.9 server APIs. Upgrading from 1.9.8 keeps the existing migration class and introduces no schema changes.

## New Features
- Map 1.9.9 to migration V25, the same class as 1.9.8; no migration class is added.

## Bug Fixes
- Update PHP to 8.5.12. PHP 8.5.12 fixes CVE-2026-109618 and CVE-2026-109619 ("PHP2Shell"). **Appwrite is not affected by either one:** it serves requests through Swoole rather than PHP's web SAPIs (mod_php, PHP-FPM, CGI). This release keeps the runtime on the patched version anyway.
- **Runtime:** update the base image to `appwrite/base:1.4.5`, which ships PHP 8.5.12 (appwrite/docker-base#126, #14747).