Impact Score: 5/10
Appwrite 2.6.1 — Release Notes & Engineering Impact
Source available — automated, not human-reviewed
Component: appwrite · Channel: stable. Automated analysis, not a compatibility certification. How this works.
Analysis updated: 2026-10-31.
⚡ Executive Summary (TL;DR)
Appwrite 2.6.1. Source highlight: Appwrite 2.6.1 is a precautionary maintenance release that moves the runtime to PHP 8.5.12. It ships with the same 1.2.97 self-hosted Console as 2.6.0, has no schema changes, and upgrading from 2.6.0 only replaces the images.
Who Does This Impact? (Role-Based Analysis)
💻 Software Engineers & Devs
Check the source notes against the package and APIs you use before upgrading.
📊 Product & Engineering Leads
Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.
⚙️ DevOps & Security
Verify the target version, runtime requirements and rollback procedure in the official documentation.
🔧 Bug Fixes & Patches (1)
- Update PHP from 8.5.11 to 8.5.12 through `appwrite/base` 2.2.6 (appwrite/docker-base#125). PHP 8.5.12 fixes CVE-2026-109618 and CVE-2026-109619 ("PHP2Shell"). **Appwrite is not affected by either one:** it serves requests through Swoole rather than PHP's web SAPIs (mod_php, PHP-FPM, CGI). This release keeps the runtime on the patched version anyway.
📄 View Raw Release Notes (Original Developer Log)
Appwrite 2.6.1 is a precautionary maintenance release that moves the runtime to PHP 8.5.12. It ships with the same 1.2.97 self-hosted Console as 2.6.0, has no schema changes, and upgrading from 2.6.0 only replaces the images.
### Security
- Update PHP from 8.5.11 to 8.5.12 through `appwrite/base` 2.2.6 (appwrite/docker-base#125). PHP 8.5.12 fixes [CVE-2026-109618](https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w) and [CVE-2026-109619](https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp) ("PHP2Shell"). **Appwrite is not affected by either one:** it serves requests through Swoole rather than PHP's web SAPIs (mod_php, PHP-FPM, CGI). This release keeps the runtime on the patched version anyway.
### Install
```bash
docker run -it --rm \
--volume /var/run/docker.sock:/var/run/docker.sock \
--volume "$(pwd)"/appwrite:/usr/src/code/appwrite:rw \
--entrypoint="install" \
appwrite/appwrite:2.6.1
```
### Upgrade
Upgrading from 2.6.0 uses the same command with `--entrypoint="upgrade"`, then run the migration, which has nothing to change for this release:
```bash
cd appwrite
docker compose exec appwrite migrate
```
**Back up your data first.**
### Contributors
Thank you to everyone who contributed to 2.6.1:
@loks0n @ChiragAgg5k
**Full Changelog**: https://github.com/appwrite/appwrite/compare/2.6.0...2.6.1