Download & Releases

11.4 (stable)

General Information

Release 11.4 has been published on September 3, 2026

ILIAS is free, open source software and published under the GNU General Public License (GPL), version 3.0  →  Licence

Download

ILIAS-11.4.zip
Download (github.com)
162 MB, 2026-09-03
md5: eb00c02b63bcb41a02de5aa9b5fa6259

ILIAS-11.4.tar.gz
Download (github.com)
123 MB, 2026-09-03
md5: 56d1043fa4e529c86432751cc46c7803

Important Changes

  • T&A: ILIAS 11 will remove the old "Introductory Message" and "Concluding Remarks" at the Test that were created before ILIAS 9.
    Since ILIAS 9, these "Introductory Message" and "Concluding Remarks" are created with the ILIAS Page Editor. See the Feature Wiki Article: Test: Move General Settings to UI Forms and use IPE. With ILIAS 11, the buttons and the corresponding DB tables are removed.


Known Issues

  • none

Changed Behaviour

  • UI:

    The merge of https://github.com/ILIAS-eLearning/ILIAS/pull/11444 will cause the following breaking changes. Given the novelty status of the entity (and associated) UI component(s), such cases should be rare, and any breaking change could be fixed in a backwards compatible manner. We therefore consider these breaking changes acceptable, as their value outweighs their harm.

    • Breaking change for plugins that provide a custom implementation of `ILIAS\UI\Component\Listing\Entity\Factory` and/or `ILIAS\UI\Component\Listing\Factory` by using the according exchange mechanism.
    • Breaking change for plugins that provide a custom implementation of the following UI components and their respective interface:
      • `ILIAS\UI\Component\Entity\Entity`
      • `ILIAS\UI\Component\Listing\Property`
      • `ILIAS\UI\Component\Symbol\Glyph`
    • Breaking change for skins that replace one or more of the following templates:
      • `Entity/tpl.entity.html`
      • `Listing/tpl.propertylisting.html`
  • Course: In learning objectives-driven courses, the "Settings for the Learning Objectives-Driven Course" info blocks that sometimes accompany objects are removed in version 11.3 as a usability fix.

Security Fixes

The following security issues have been fixed. For more information about these vulnerabilities, see our 11.4 security blog post.

#46342: [Membership] Membership: Potential unauthenticated access by anonymous (Jens Weber (Universität Bern))
#47936: [Statistics and Learning Progress] Learning Progress: Unauthenticated access to general course information
#48220: [Learning Sequence] Missing RBAC check in learning sequence (Daniel Kipp (Kröpelin Projekt GmbH))
#48241: [User Service] Remove SYSTEM_ROLE from List of Assignable Roles in Local User Administration (Kevin Pulfermuller (vimotion GmbH))
#48260: [Group] Missing permission checks in groups
#48264: [Learning Module SCORM 1.2] Missing authorisation in ilObjSAHSLearningModuleGUI for uploads in SCORM
#48265: [File] Unauthorized Upload of Files

Fixed Issues

The following issues reported in Mantis have been resolved:

#48022: [Booking Pool] Delete event handling crashes on object deletion when trash is disabled (tjoussen)
#47767: [Data Collection] Incorrect "Detailed view" when a field in table references another table (iszmais)
#48189: [Data Collection] Error thrown with message "Call to a member function setAlert() on null" when creating new entry (iszmais)
#48226: [ECS Interface] Deleting an existing mapping within the "Course Allocation" triggers a TypeError (sdyhr)
#43581: [ILIAS Page Editor] Listen ohne Absatzformat (akill)
#48204: [Legal Documents, Terms of Service and Data Protection] It is not possible to delete Terms of Service or Declaration of Data Protection documents (lscharmer)
#48245: [Logging] Setting any Log-Level to "Disabled" triggers system-wide Internal Server Error: Level "1000" is not defined (smeyer)
#48257: [Media Pools and Media Objects] ILIAS MediaCast object downlaods fail (akill)
#48187: [User Service] Skin nicht definiert (skergomard)
#48262: [Wiki] Change Mails from the (Feature) Wiki (Templates) are interpreted a little bit special by the markdown parser (akill)
#48246: [WOPI] U/X: Permission mismatch between ILIAS and external Editor (WOPI) lead to end-user unfriendly warnings (fschmid)
#48239: [¥ Object] List items are partially HTML enconded (skergomard)
#47745: [¥ UI Components / KS] UI/DropDown: Active dropdown not closed when pressing Esc (oliversamoila)
#48017: [¥ UI Components / KS] Erstellen einer neuen Ansicht » "Argument 'value': Display value does not match input type." (oliversamoila)
#48238: [¥ UI Core] LegacyModal.js: No such file or directory (tfuhrer)