Skip to content

FolderHost

v26.6.2 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 27d File Storage & Sync
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 1 known CVE

Topics

cloud collaborative-editing file-manager go linux portable
+3 more
react self-hosted windows

Affected surfaces

auth

Summary

AI summary

Broad release touches What's New, Manual Configuration, Docker Usage ```bash, and Run with docker-compose.

Full changelog

FolderHost Release v26.6.2

Release Date: 2026-06-29 16:41:16 UTC

What's New

Added

  • Config Migration: Added automatic config.yml migration system.
  • SSL: Added SSL configuration to the default configuration file. You can enable it by setting ssl.enabled to true in the configuration file. There are 2 possible ways to use it. The first one is to use a self signed certificate. The second one is to use a let's encrypt certificate. If you don't have a domain or you don't want to use let's encrypt certificate just use the self signed certificate.

Changed

  • Navigation bar design: The old one was looking weird and unconfortable for most of users. It was not compatible with devices that has low height. So I think the newer design is looking better now. If you have any other suggestions you can open a discussion for that.
    • Old:
    • New:

Security

  • Login system: Limit max failed login attempts to 5 (Username will be blocked for 5 minutes after 5 failed login attempts).

Downloads

| Platform | Architecture | Format | Download |
|----------|--------------|--------|----------|
| Linux | x86_64 | tar.gz | folderhost-linux-amd64.tar.gz |
| Linux | ARMv7 (32-bit) | tar.gz | folderhost-linux-armv7.tar.gz |
| Linux | ARM64 | tar.gz | folderhost-linux-arm64.tar.gz |
| Windows | x86_64 | zip | folderhost-windows-amd64.zip |
| macOS | Intel | tar.gz | folderhost-macos-intel.tar.gz |
| macOS | Apple Silicon (M1/M2/M3) | tar.gz | folderhost-macos-applesilicon.tar.gz |
| FreeBSD | x86_64 | tar.gz | folderhost-freebsd-amd64.tar.gz |
| Docker | Multi-arch | image | docker pull mertjsx/folderhost:v26.6.2 |

Docker Usage

# Pull the image
docker pull mertjsx/folderhost:v26.6.2

# Or use latest
docker pull mertjsx/folderhost:latest

# Run with docker-compose
# Download docker-compose.prod.yml from repository
docker-compose -f docker-compose.prod.yml up -d

Important: The application will use port 5000 by default, but you can change this in config.yml and update the port mapping in docker-compose.prod.yml accordingly.

Quick Start

Linux (x86_64)

# Download and extract
wget https://github.com/MertJSX/folderhost/releases/download/v26.6.2/folderhost-linux-amd64.tar.gz
tar -xzf folderhost-linux-amd64.tar.gz
chmod +x folderhost-linux-amd64

# Run
./folderhost-linux-amd64

Windows

# Download, extract, and run
# Edit config.yml as needed
folderhost.exe # Or just double click

Docker

# Run container, you can access the files using docker volumes
docker run -d \
  --name folderhost-server \
  -p 5000:5000 \
  -v folderhost_data:/app \
  --restart unless-stopped \
  mertjsx/folderhost:v26.6.2

Manual Configuration

  1. Extract the downloaded archive (for binary installations)
  2. Run the application once to generate config.yml
  3. Edit config.yml to customize settings (especially the port if needed)
  4. For Docker: Update the port mapping in docker-compose.prod.yml if you changed the port in config.yml
  5. Restart the application

For issues and questions, please visit the GitHub Issues page.

Security Fixes

  • Login system now limits max failed attempts to 5, blocking the username for 5 minutes after threshold

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track FolderHost

Get notified when new releases ship.

Sign up free

About FolderHost

Share files and collaborate with others in real-time

All releases →

Related context

Beta — feedback welcome: [email protected]