Download & Releases

9.16 (stable)

General Information

Release 9.16 has been published on December 16, 2025

  • Please read the ILIAS 9 feature page for information about new and abandoned features and changed behaviour of this version.
  • You find information about first time installation of ILIAS 9 and updating here.
  • Please also have a look at the Required Software for ILIAS 9 page.

ILIAS is free, open source software and published under the GNU General Public License (GPL), version 3.0  →  Licence

Download

ILIAS-9.16.zip
Download (github.com)
157 MB, 2025-12-16
md5: 4fa4869bd39edf3a5f7b3774dccee484

ILIAS-9.16.tar.gz
Download (github.com)
142 MB, 2025-12-16
md5: b1ea0a3a0d03f49aaceb659cd4c963bc 

Important Changes

  • System Styles: Custom system styles from 8 and earlier do no longer work
    • With ILIAS 9 the SCSS has been restructered according to the ITCSS structure suggested in the SASS guidelines. In addition, the depencency to less from Bootstrap has mostly been removed. However, the change from less to SCSS and the abandonment from Bootstrap means, that System Styles from 8 and lower are NOT compatible with ILIAS 9. They cannot be imported, be used, or compiled.
    • However, note, that most of the css should still work. Also less and scss are not that far appart. Best read through our SCSS Coding Guidelines to get started.
  • JavaScript Dependencies: Removal of 'node_modules' folder from Git repository
    • The 'npm' dependencies and thus the 'node_modules' folder in the ILIAS root directory were removed from the ILIAS codebase.
    • All 'npm' dependencies will still be automatically added to the release builds (linked on the official ILIAS release pages) on GitHub.
    • With this change 'npm' will become a requirement for ILIAS installations based on Git branches/tags. To install the 'npm' dependencies on such installations, you'll have to execute:

      npm clean-install --omit=dev --ignore-scripts
    • The --omit=dev flag can be ignored for development installations. 
  • Chat Server: Removal of 'node_modules' folder from Git repository
    • The 'npm' dependencies and thus the 'node_modules' folder of 'Modules/Chatroom/chat' were removed from the ILIAS codebase in Git with the integration of PR 5128.
    • All 'npm' dependencies will still be automatically added to the release builds (linked on the official ILIAS release pages) on GitHub.
    • With this change 'npm' will become a requirement for ILIAS installations based on Git branches/tags. To install the 'npm' dependencies on such installations, you'll have to execute:

      npm clean-install --omit=dev --ignore-scripts

      The --omit=dev flag can be ignored for development installations. 
  • Cron Jobs:
  • PDF Generation:
    • wkhtmltopdf has been removed from the code base. 
  • Authentication/SAML:
  • MathJax:
    • Please check if you configured a polyfill url at Administration » Third Party Software » MathJax. This is not needed by modern browsers and IE 11 is no longer supported by ILIAS at all. You should NOT use the polyfill.io library any longer, see https://sansec.io/research/polyfill-supply-chain-attack for details.

Known Issues

  • none

Changed Behaviour

Security Fixes

The following security issues have been fixed. For more information about these vulnerabilities, see our 9.16 security blog post.

#45883: [Background Tasks] BackgroundTasks: Missind CSRF token for two commands in ilBTControllerGUI (Michael Jansen (Databay AG))
#45884: [Background Tasks] BackgroundTasks: Open redirect in ilBTControllerGUI (Michael Jansen (Databay AG))
#45900: [Background Tasks] BackgroundTasks: Unauthorized deletion of tasks (Ilja Lukin (Fachhochschule Dortmund))
#45905: [¥ Object] Repository: Stored XSS via SVG file upload of custom icons
#46496: [SOAP & Webservices] ilServer: Apache Tika multiple XXE vulnerabilities (CVE-2025-66516)
#46023: [SOAP & Webservices] SOAP: Unauthorized function calls (André Schweigert (FAU|ILIAS))
#46024: [SOAP & Webservices] SOAP: Unauthorized data exposure (André Schweigert (FAU|ILIAS))
#46025: [SOAP & Webservices] SOAP: Missing source permission check (André Schweigert (FAU

Fixed Issues

The following issues reported in Mantis have been resolved:

#44904: [Booking Pool] Booking tool: The value of the course-specific user data is not displayed under “Bookings”. (tjoussen)
#45369: [Booking Pool] After increasing the limit of bookings, the old limit is still effective (tjoussen)
#45925: [Booking Pool] “Add Users From Current Course” shows empty list for non-owners in Booking Pool (tjoussen)
#46007: [Booking Pool] Personal data cannot be exported (Excel/CSV). (tjoussen)
#46368: [Course Management] Failed test: Datei aus Kursinfo löschen (shepherd)
#45688: [Data Collection] error when calling URL to dedicated table in Data Collection (iszmais)
#45719: [Data Collection] deletion of entry in Data Collection throws an error (iszmais)
#45850: [Data Collection] Copying a DC deactivates Noticiation setting (iszmais)
#45926: [Data Collection] Link to detailed view opens detailed view in a new browser tab/window (iszmais)
#45963: [Data Collection] Usability Issue: Presentation of active view of DC too implicit (iszmais)
#46032: [Data Collection] Beim Aktualisieren eines Eintrags werden die Werte der gesamten Tabelle ausgelesen (iszmais)
#46196: [Data Collection] DC crash due to deleted references/linked objects (iszmais)
#46381: [Data Collection] Orphaned language variable dcl_notimage_exception + code? (iszmais)
#46431: [Data Collection] Exported XLSX of DC faulty when tablename exceeds 41 chars/has special combinations (iszmais)
#46444: [Data Collection] Change to manage view ignores selected view (iszmais)
#46235: [Exercise] Exercise/Peer Feedback: Fragile handling of criteria value when trying to escape given value (akill)
#46114: [Forum] Empty Thread: Subject of first post will overwrite title (mjansen)
#45742: [ILIAS Page Editor] Accordions containing Content-Snippets crash ILIAS when clicked in the page editor (akill)
#46127: [ILIAS Page Editor] Background color not respected in paragraph format dropdown (akill)
#46129: [ILIAS Page Editor] Cloze questions in page editor: select gaps already show values instead of empty selection (akill)
#46401: [Item Groups] Objekteblöcke mit manuellen Objektblöchen (tjoussen)
#41922: [Language Handling] Message regarding missing date for course period or availability period is misleading (mkunkel)
#45826: [Language Handling] Text ist sehr nichtssagend (mkunkel)
#45984: [Learning Module ILIAS : Assessment Questions] Auswahl-Lücke: korrekt gewählte Antwort wird nach erneutem Seitenaufruf abgeändert (tjoussen)
#46159: [Legal Documents, Terms of Service and Data Protection] Tab Documents of Terms of Service is not accessible (mjansen)
#46164: [Legal Documents, Terms of Service and Data Protection] TermsOfService: Missing tab activation when trying to reset acceptance state (lscharmer)
#46207: [Legal Documents, Terms of Service and Data Protection] Es lässt sich keine Nutzungsvereinbarung hinterlegen. (mjansen)
#45216: [Media Pools and Media Objects] generatePreviewPic always falls back to default (80px) (akill)
#45933: [Media Pools and Media Objects] Not possible to exclude usages in history from ilObjMediaObject::_getMobsOfObject (akill)
#33207: [Metadata + ADT] Error in Administration -> Search and Find -> Metadata -> Custom Metadata -> Presentation (tschmitz)
#46452: [News] Dashboard loading times excessively long or time out when loading user news (tjoussen)
#45807: [Session (Course & Group)] Session/Performance: Performance issue: Full table scan on event table in \ilObjSessionAccess::_lookupRegistration (smeyer)
#41385: [SOAP & Webservices] Error "Class 'ILIAS\OrgUnit\Webservices\SOAP\AddUserIdToPositionInOrgUnit' not found" in SOAP Service addUserToPositionInOrgUnit (Jephte)
#40169: [Statistics and Learning Progress] learning progress of SCORM 2004 learning module chapters is not shown correctly (smeyer)
#46182: [Statistics and Learning Progress] Matrix view export causes error (smeyer)
#44710: [Test & Assessment] Introductory texts in tests are deleted automatically by clicking on "edit introduction" (skergomard)
#44715: [Test & Assessment] Feedback is not saved in Tiny if written back into qpl (tjoussen)
#44724: [Test & Assessment] Print to PDF via Browser schlecht lesbar (tjoussen)
#45304: [Test & Assessment] 'Manual Scoring' by Question lacks unique identifier for participant (skergomard)
#45505: [Test & Assessment] unfinished Testpasses are graded incorrect (passed-status) with "Score the Best Attempt" (tjoussen)
#45906: [Test & Assessment] 'Lock Answers After Moving to Next Question' crashes with test in two tabs (tjoussen)
#45956: [Test & Assessment] Another error when trying to apply personal default settings (tjoussen)
#46096: [Test & Assessment] formula questions can not be saved with certain variable settings (tjoussen)
#46481: [Test & Assessment] Question pools can be created via 'Create Question' without having the right to do so (or even QPLs not being available at all!) (skergomard)
#46482: [Test & Assessment] Essay Question: Presentation field of results too narrow (and not responsive) (skergomard)
#46552: [Test & Assessment] The 'Print View' for the questions gives the print date as "Today" ;-) – and shows awkward heading prefix "Test and Assessment" (skergomard)
#46554: [Test & Assessment] Archive export for 'File Upload' questions behaves erratically (skergomard)
#46252: [User Service] In the table of roles assigned to a user, some entries are clickable without the needed permissions (skergomard)
#45828: [¥ HTTP] HTTP close return type should be "never" (fschmid)
#44170: [¥ Init] The system "crashes" with error when going to ilias.php without login (mjansen)
#46364: [¥ UI Core] Error in_array(): Argument #2 ($haystack) must be of type array, null given (tfuhrer)