25. Internationale ILIAS-Konferenz

Jetzt Tickets sichern / Order Tickets now!

Download & Releases

10.9 (stable)

General Information

Release 10.9 has been published on July 7, 2026

ILIAS is free, open source software and published under the GNU General Public License (GPL), version 3.0  →  Licence

Full Screen

Download

ILIAS-10.9.zip
Download (github.com)
154 MB, 2026-07-07
md5: 61c93f2b4f9681e3b1f9552923918a24

ILIAS-10.9.tar.gz
Download (github.com)
139 MB, 2026-07-07
md5: bac7d1847dd28c3e708cfd8c224e14db

Important Changes

  • New Component and Directory Structure
    As part of the implementation of the new component and directory structure in ILIAS 10, the overall file layout has changed significantly. Please note that the webroot is now located in ./public, and this requires an adjustment in your web server configuration.
  • Manage System Styles Removed
    With ILIAS 10, the management of system styles has been discontinued for security reasons. Styles can no longer be edited via the Administration area. For more details, see: https://docu.ilias.de/go/wiki/wpage_8390_1357
  • Support of Subtitles
    SRT subtitle support was changed to VTT subtitle support

Full Screen

Known Issues

  • none

Changed Behaviour

  • Data Collection:
    • The new field type "Copy" was added to the data collection and can now be selected for new fields! A copy field shows a selection of values from another tables entry and copies those to its own value without a reference, making it robust against manipulation and deletion of the origin value.
  • Media objects:
    • We moved to native video tags which do not officially support srt files for subtitles. The supported standard is WebVTT. ILIAS tries to convert srt to vtt on the fly. You will be not able to upoad srt files anymore, please use vtt files instead, see https://mantis.ilias.de/view.php?id=43935
  • Object:
    • Titles and Desciptions will always be interpreted as strings. Contained html-tags are encoded and shown in their literal form.
  • Test & Assessment:
    • Cloze questions do not offer the option to edit gaps in modals anymore. All gaps are available, as previously, underneath the cloze-text input field.
    • Redirect: Starting with Version 10.3, we introduce a separate option to redirect to the logout screen, as redirecting to https://instance.url/logout.php does not work anymore since ILIAS 10.1.
    • Create Export File with HTML Code: The JourFixe on 09 FEB 2026 decided to remove the setting "Export Essay Question with HTML code" from the Test & Assessment administration. Code was removed on 09 FEB 2026 from the release_10, release_11, and trunk branches. (ILIAS Version 10.6)
  • Mediacast:
  • Page Editor:
    • The owl carousel library has not been proposed for ILIAS 10 and thus is not part of it anymore (it was part of the legacy accordion UI element). The page component now implements a simple transisition between carousel pages.
  • Page Editor:
    • The legacy UI element advanced select input gui has been removed from the code. The editor now uses a standard select input in forms for these cases. These do not show advanced style visuals.
  • UI:

    The merge of https://github.com/ILIAS-eLearning/ILIAS/pull/11444 will cause the following breaking changes. Given the novelty status of the entity (and associated) UI component(s), such cases should be rare, and any breaking change could be fixed in a backwards compatible manner. We therefore consider these breaking changes acceptable, as their value outweighs their harm.

    • Breaking change for plugins that provide a custom implementation of `ILIAS\UI\Component\Listing\Entity\Factory` and/or `ILIAS\UI\Component\Listing\Factory` by using the according exchange mechanism.
    • Breaking change for plugins that provide a custom implementation of the following UI components and their respective interface:
      • `ILIAS\UI\Component\Entity\Entity`
      • `ILIAS\UI\Component\Listing\Property`
      • `ILIAS\UI\Component\Symbol\Glyph`
    • Breaking change for skins that replace one or more of the following templates:
      • `Entity/tpl.entity.html`
      • `Listing/tpl.propertylisting.html`
  • Course: In learning objectives-driven courses, the "Settings for the Learning Objectives-Driven Course" info blocks that sometimes accompany objects are removed in version 10.10 as a usability fix.

Full Screen

Updated Languages

  • Update of Japanese language support, thanks to Shiro Tamoto from Nagaoka University of Technology

Security Fixes

The following security issues have been fixed. For more information about these vulnerabilities, see our 10.9 security blog post.

#47834: [Category and Repository] Add RBAC check for Repository Objects (Franziska Senze)
#47954: [Notes] Notes: Insufficient access checks
#47952: [¥ Object] Object: Remove Information on Temp File Location from Error Message
#47887: [SOAP & Webservices] SOAP: Insecure Direct Object Reference (IDOR)
#47800: [Course Management] Stored XSS via HTML attribute injection (André Schweigert ( FAU | ILIAS ))

Fixed Issues

The following issues reported in Mantis have been resolved:

#33588: [Accessibility / WCAG Issues] Rating als Liste (oliversamoila)
#43788: [Accessibility / WCAG Issues] aria-haspopup on the control element “Sort test results” is unfavorable (oliversamoila)
#47847: [Blog] Blog-Import throws error (akill)
#21705: [Booking Pool] Delete a booking-object, Calendar entries of booked objects are still available. (tjoussen)
#42358: [Category and Repository] Container/BackgroundTasks: \ilContainerGUI::downloadObject can be executed for non supporting object types (tjoussen)
#47811: [Chat] Unaligned Formatting in 'Chat Functions' Box (lscharmer)
#47813: [Chat] Infoline for 'Allow Custom User Names'? (lscharmer)
#47824: [Chat] 'Auto Generated User Names' in wrong section AND required? (lscharmer)
#45992: [CSS / Templates] Breadcrumb: Missing Expand Glyph for small screens (BettinaSolzbacher)
#47875: [Data Collection] Yet another ordering issue: Alphabetical ordering fails (iszmais)
#47829: [Employee Talk] Mitarbeiter wird bei Gesprächseinladung nicht gefunden (existiert nicht) (skergomard)
#47934: [Employee Talk] Deleting/Editing an Employee Talk may cause crash if no template exists anymore (tschmitz)
#45055: [Exercise] Cannot overwrite a feedback file by uploading a new version, instead 2 files are created (fschmid)
#46217: [Exercise] Remaining steps in migrations keep increasing (akill)
#47762: [Exercise] File feedback for team uploads: No notification for members (akill)
#47850: [Exercise] Team uploads: Only 1st team member can see evaluation statement (akill)
#47851: [Exercise] Evaluation statement text is not saved after < sign (KS textarea) (akill)
#47925: [Exercise] Action "Evaluation by File" does not update evaluation date for Team Uploads (akill)
#47450: [Learning Module SCORM 1.2] Href of a <resource> is not affected by "xml:base" attributes (qualitus.hartwig)
#44728: [Learning Module SCORM 2004] SCORM2004 modul causes lots of error-log-files (qualitus.hartwig)
#47789: [Learning Module SCORM 2004] 1406 Data too long for column 'id' at row 1 (qualitus.hartwig)
#47790: [Learning Module SCORM 2004] 1406 Data too long for column 'pattern' at row 1 (qualitus.hartwig)
#47987: [Login, Auth & Registration] “Maximum Login Attempts” also applies to Shibboleth users without local logins (mjansen)
#48023: [Login, Auth & Registration] LDAP User Synchronization status always shown as "Enabled" in LDAP Server Settings (mjansen)
#47886: [Metadata + ADT] Cron Job "OER-Harvester": Too few arguments to function ILIAS\MetaData\Copyright\Search\Searcher::search() (smeyer)
#47534: [News] Whoops\Exception\ErrorException thrown with message "Undefined property: ilPDNewsBlockGUI::$logger" (tjoussen)
#47631: [News] Enabling the filter leads to error: foreach() argument must be of type array|object, null given (tjoussen)
#46797: [Test & Assessment] column 'Matriculation Number' at tab 'Participants' is available at anonymous tests (tjoussen)
#47413: [Test & Assessment] Oversized text input fields in Cloze Questions manual scoring modal (tjoussen)
#47625: [Test & Assessment] Failed test: Formelfrage erstellen (tjoussen)
#47758: [Test & Assessment] Plugin question type is not translated in question pool (tjoussen)
#47831: [Test & Assessment] Specific test config(s?) leads to whoops on repeat attempt (skergomard)
#47935: [Test & Assessment] Whoops on test attempt export (skergomard)
#47939: [Test & Assessment] Exception when opening Statistics tab for Single/Multiple Choice question (tjoussen)
#47941: [Test & Assessment] Variables in Imported Results of Formula Questions Not Exported Correctly in Excel Export (skergomard)
#47971: [Test & Assessment] Best Solution in Archive Export Empty on Random Test (skergomard)
#47978: [Test & Assessment] Name of Participant Blank in Participant List After Deletion (skergomard)
#47983: [Test & Assessment] Copied tests lose their link to the question pool (skergomard)
#48027: [¥ Init] "Forgot password" email does not contain a system signature (mjansen)
#47755: [¥ Tiny MCE] Including images with drag-and-drop without specifying image size leads to missing editor buttons (mjansen)

Full Screen