Download & Releases

10.12 (stable)

General Information

Release 10.12 has been published on October 6, 2026

ILIAS is free, open source software and published under the GNU General Public License (GPL), version 3.0  →  Licence

Full Screen

Download

ILIAS-10.12.zip
Download (github.com)
154 MB, 2026-10-06
md5: 51ea0ffdb0a0c98a9d3d9530dc624c4f 

ILIAS-10.12.tar.gz
Download (github.com)
139 MB, 2026-10-06
md5: 44db8ff48815ed48887154089accba3b

Important Changes

  • New Component and Directory Structure
    As part of the implementation of the new component and directory structure in ILIAS 10, the overall file layout has changed significantly. Please note that the webroot is now located in ./public, and this requires an adjustment in your web server configuration.
  • Manage System Styles Removed
    With ILIAS 10, the management of system styles has been discontinued for security reasons. Styles can no longer be edited via the Administration area. For more details, see: https://docu.ilias.de/go/wiki/wpage_8390_1357
  • Support of Subtitles
    SRT subtitle support was changed to VTT subtitle support

Full Screen

Known Issues

  • none

Changed Behaviour

  • Data Collection:
    • The new field type "Copy" was added to the data collection and can now be selected for new fields! A copy field shows a selection of values from another tables entry and copies those to its own value without a reference, making it robust against manipulation and deletion of the origin value.
  • Media objects:
    • We moved to native video tags which do not officially support srt files for subtitles. The supported standard is WebVTT. ILIAS tries to convert srt to vtt on the fly. You will be not able to upoad srt files anymore, please use vtt files instead, see https://mantis.ilias.de/view.php?id=43935
  • Object:
    • Titles and Desciptions will always be interpreted as strings. Contained html-tags are encoded and shown in their literal form.
  • Test & Assessment:
    • Cloze questions do not offer the option to edit gaps in modals anymore. All gaps are available, as previously, underneath the cloze-text input field.
    • Redirect: Starting with Version 10.3, we introduce a separate option to redirect to the logout screen, as redirecting to https://instance.url/logout.php does not work anymore since ILIAS 10.1.
    • Create Export File with HTML Code: The JourFixe on 09 FEB 2026 decided to remove the setting "Export Essay Question with HTML code" from the Test & Assessment administration. Code was removed on 09 FEB 2026 from the release_10, release_11, and trunk branches. (ILIAS Version 10.6)
    • Notification: With the Test: Revision of the Participant Tab using the new data table, the composition of the attached test result Excel file was changed (it is the same as in the Participant Tab). Now, it always contains the complete test result, not only of one participant. (Only in ILIAS Version 10, as this feature is abandoned in ILIAS 11).
    • Number of Questions and Maximal Available Points are shown above the filter and the table within the Test Question Pool: See PR 12046 and Mantis 45093.
      We use the same pattern for the number of participants within the test tab 'Participants': Mantis 48206.
  • Mediacast:
  • Page Editor:
    • The owl carousel library has not been proposed for ILIAS 10 and thus is not part of it anymore (it was part of the legacy accordion UI element). The page component now implements a simple transisition between carousel pages.
  • Page Editor:
    • The legacy UI element advanced select input gui has been removed from the code. The editor now uses a standard select input in forms for these cases. These do not show advanced style visuals.
  • UI:

    The merge of https://github.com/ILIAS-eLearning/ILIAS/pull/11444 will cause the following breaking changes. Given the novelty status of the entity (and associated) UI component(s), such cases should be rare, and any breaking change could be fixed in a backwards compatible manner. We therefore consider these breaking changes acceptable, as their value outweighs their harm.

    • Breaking change for plugins that provide a custom implementation of `ILIAS\UI\Component\Listing\Entity\Factory` and/or `ILIAS\UI\Component\Listing\Factory` by using the according exchange mechanism.
    • Breaking change for plugins that provide a custom implementation of the following UI components and their respective interface:
      • `ILIAS\UI\Component\Entity\Entity`
      • `ILIAS\UI\Component\Listing\Property`
      • `ILIAS\UI\Component\Symbol\Glyph`
    • Breaking change for skins that replace one or more of the following templates:
      • `Entity/tpl.entity.html`
      • `Listing/tpl.propertylisting.html`
  • Course: In learning objectives-driven courses, the "Settings for the Learning Objectives-Driven Course" info blocks that sometimes accompany objects are removed in version 10.10 as a usability fix.

Full Screen

Security Fixes

The following security issues have been fixed. For more information about these vulnerabilities, see our 10.12 security blog post.

#47077: [File] File Services: Prohibited file suffixes bypassable (Martin-Luther-Universität Halle-Wittenberg)
#48028: [Test & Assessment] Authenticated RCE via Test import (André Schweigert (FAU|ILIAS))
#48072: [xAPI] Authenticated RCE via CmiXapi (André Schweigert ( FAU | ILIAS ))
#48213: [News] Stored XSS in the news (André Schweigert (FAU|ILIAS))
#48292: [Test & Assessment] Unauthenticated test-question rendering (André Schweigert (FAU|ILIAS))
#48298: [Forum] Fix forum attachment download processes ignored forum binding
#48313: [Calendar] Unauthenticated user and role enumeration via calendar (André Schweigert (FAU|ILIAS))
#48329: [Search] Anonymous user enumeration via Search (André Schweigert (SchweigertIT))
#48359: [Test & Assessment] Close RCE in ImageMap Question by Removing Unnecessary Code (André Schweigert (SchweigertIT))
#48362: [Staff] Broken access control in MyStaff (Peter Reichartz)
#48365: [Test & Assessment] Fix file deletion through uncaught file traversal opportunity in SingleChoice, MultipleChoice, KPrim, Matching, and Ordering Questions (André Schweigert (SchweigertIT))
#48366: [Learning Module SCORM 2004] Stored XSS in SCORM tracking reports (André Schweigert (SchweigertIT))
#48373: [Test & Assessment] Protect Additional Function Commands By Write (André Schweigert (FAU|ILIAS))
#48374: [Test & Assessment] Add Access Checks and Filtering to Result-Functions for Administrators (André Schweigert (FAU|ILIAS))
#48402: [Test & Assessment] Prevent Accessing Anonymous Test Run by Providing Active Id Only
#48413: [Test & Assessment] RCE via questionpool import (André Schweigert (SchweigertIT))
#48414: [Test & Assessment] RCE in ImageMapQuestion (André Schweigert (SchweigertIT))
#48447: [Survey] Anonymous user enumeration via Survey (André Schweigert (FAU|ILIAS))
#48453: [File] File: Anonymous users could download file objects without permission when the public area was enabled. (Isira Adithya (@isira_adithya, https://github.com/isira-adithya))

Fixed Issues

The following issues reported in Mantis have been resolved:

#44883: [Background Tasks] Bulk Download von Objekten für Anonymous funktioniert nicht (tjoussen)
#48100: [Blog] Language variable ID showing instead of entries. But entries exist in the various language files. (akill)
#42379: [Category and Repository] Limit Objects per Block: No Show More Button (akill)
#47272: [Category and Repository] Repository/Component/RBAC: Deactivated plugin type cannot be deinstalled (misleading error message) (akill)
#47803: [Category and Repository] ILIAS\HTTP\Response\Sender\ResponseSendingException thrown with message "Response was already sent." (PR) (akill)
#48416: [Certificate] In certain cases, the text in the certificate can no longer be centred (mjansen)
#42263: [Course Management] global and/or lokal style is not imported, although included in export file (akill)
#43358: [Course Management] Failed test: Kurs exportieren (akill)
#44942: [Course Management] Failed test: Sichtbarkeit einer Portfolio-Freigabe überprüfen (akill)
#46977: [Course Management] Learning Progress stays "In progress" (yellow) for Tutor/Administrator users after completing Learning Module (akill)
#48299: [Course Management] Aufruf "Lernfortschritt" im Kurs und über Hauptmenü führt zu Fehler -> SEIT UPDATE auf Ilias 10.11 (smeyer)
#35649: [Exercise] Reminder settings should be hidden when cronjob is disabled (akill)
#39303: [Exercise] Übung: Abgabebenachrichtigungen an frühere Kurstutoren (akill)
#44234: [Exercise] Failed test: Global activation of the 'positions' for exercises (akill)
#46390: [Exercise] Übungseinheit mit zufälliger Auswahl einreichen > alle Übungseinheiten im Kalender einsehbar und aufrufbar (akill)
#47668: [Exercise] Infoline for upload limit not correct for team uploads (akill)
#48019: [Exercise] Silent Failure: Failed file upload creates 0-byte file without user notification (akill)
#48346: [Exercise] TypeError thrown with message "substr(): Argument #3 ($length) must be of type ?int, false given" (akill)
#48425: [Exercise] Peer feedbacks got lost during migration (akill)
#48454: [Exercise] Uploading additional peer feedback files leaves junk data in IRSS (akill)
#48223: [Export] XML export file of a certain course fails with "This file could not be imported. ..." (smeyer)
#47828: [File] permission "Bypass Negative List" for administrators does not work at import of learning module SCORM (fschmid)
#48371: [Forum] Error thrown with message "Typed property ForumDto::$top_pk must not be accessed before initialization" (mjansen)
#40079: [ILIAS Page Editor] Einfügen eines Inhaltes über die Maus wird in der Tabellespalte nicht gespeichert (akill)
#40645: [ILIAS Page Editor] Dropdown Absatzformate für Akkordeons wird nicht im Slate angezeigt (akill)
#41043: [ILIAS Page Editor] External links with pipes look strange (akill)
#42247: [ILIAS Page Editor] Block: Permission object is not adapted to the copy of the object after copying (akill)
#42606: [ILIAS Page Editor] Absatzformate lassen sich nicht gesammelt bearbeiten (akill)
#44269: [ILIAS Page Editor] Failed test: Löschung des Overlay-Bildes (akill)
#44274: [ILIAS Page Editor] Drag-and-drop an element (akill)
#44513: [ILIAS Page Editor] Order of style sections is ignored. (akill)
#44649: [ILIAS Page Editor] Section: External link target allows only up to 200 characters (akill)
#45461: [ILIAS Page Editor] internal link is not adapted when copying container object (akill)
#45958: [ILIAS Page Editor] Removed language still visible in multilingual page editing (akill)
#47022: [ILIAS Page Editor] Preview for style classes not working in sections and table cell menus (akill)
#47657: [ILIAS Page Editor] Entries in page_history not purged when object is deleted (akill)
#47754: [ILIAS Page Editor] Map content elements in COPage can overflow their parent container on narrow viewports (PR) (akill)
#48141: [ILIAS Page Editor] Reordering page elements using drag-and-drop does not work in all browsers (akill)
#48281: [ILIAS Page Editor] Editing paragraph with outdated characteristic fails (JS TypeError, infinite loading) (akill)
#48449: [ILIAS Page Editor] Block: "Ziel-Objekt wählen" für interne Links reagiert nicht (akill)
#48043: [Item Groups] Objekteblöcke offen und mit Titel (tjoussen)
#48101: [Item Groups] ILIAS\ItemGroup\Setup\Agent.ilItemGroupDisplayMigration does not stay [done] (tjoussen)
#42405: [Language Handling] Use sess#:#sess_members_gallery# (smeyer)
#48008: [Learning Module HTML] Link zu "Inhalt bearbeiten" führt zu falschem Lernmodul (maxbecker)
#48113: [Learning Module HTML] "Edit content" leads to wrong HTML Learning Module (maxbecker)
#48169: [Learning Module HTML] When copying an HTML learning module, the associated files are not copied. (maxbecker)
#48415: [Learning Module HTML] Edit Content in HTML Learning Module leads to wrong module (maxbecker)
#31765: [Learning Module ILIAS : Assessment Questions] Feedbacks in Questions of Learning Module: Closed Accordion Panels won't open when clicking on them (akill)
#37322: [Learning Module ILIAS : Editor] ILIAS Learning Module Editor - Learning Progress - Links to Chapters (akill)
#38718: [Learning Module ILIAS : Editor] Learning Module -> Adopt Content (akill)
#48251: [Learning Module ILIAS : Editor] FAQ Tool: Falsche Seite bei Verlinkung auf Seite aus anderem ILIAS-Lernmodul (akill)
#27940: [Learning Module ILIAS : Presentation] Fehlende Sprachvariablen bei Verlinkungen in Medienobjekten auf Plugins (Interactive Video, Mobile Quiz, etc) (akill)
#40637: [Learning Module ILIAS : Presentation] Deleted glossary can still be used in the learning module (akill)
#43359: [Learning Module ILIAS : Presentation] No fullscreen for image if the page contains a question with IPE for feedback (akill)
#43562: [Learning Module ILIAS : Presentation] Failed test: ILIAS Lernmodul kopieren (akill)
#45316: [Learning Module ILIAS : Presentation] Description of Learning Modul is not displayed in Presentation View (akill)
#45923: [Learning Module ILIAS : Presentation] Missing Chapter Name in Breadcrumb When Opening Learning Module (akill)
#46968: [Learning Module ILIAS : Presentation] Learning Progress does not mark pages containing questions as completed when the copied module has multilingualism enabled (akill)
#47796: [Learning Module ILIAS : Presentation] HTML-Download noch unterstützt? (akill)
#45815: [Learning Module SCORM 1.2] All SCOs lost on Import when Importing a zip file that was exported from ILIAS (both 1.2 and 2004) (qualitus.hartwig)
#48459: [Learning Module SCORM 1.2] SCORM 1.2: Call to undefined method ilSCORMPresentationGUI::logWarning() (qualitus.hartwig)
#48294: [Learning Sequence] Personal Learning Progress cannot be opened after update to ILIAS 9.23 (smeyer)
#47459: [Main Menu] Main Menu sub-items can't be activated (fschmid)
#46877: [Media Pools and Media Objects] Allowed filetypes diverge on create and update (akill)
#47603: [Media Pools and Media Objects] Default Properties: setting "Text Representation" (alt-Attribute) resets image size to fixed 0x0 (akill)
#47838: [Media Pools and Media Objects] The title “Thumbnail” doesn't have enough space (akill)
#48342: [News] news_block_news_for_context - in code but never triggered (tjoussen)
#48375: [Organisational Units] SOAP method importOrgUnitsSimpleXML fails with HTTP 500 because ilOrgUnitImporter::$stats is never initialized (fschmid)
#47686: [Portfolio] Links within portfolios always redirect to the first page instead of the specific target page (akill)
#48176: [Search] Lucene indexing not working for plugins (smeyer)
#48207: [SOAP & Webservices] SOAP importUsers incorrectly denies user creation for a global administrator (ahmed)
#43687: [Style – Content Style] No way back while pasting a style class (akill)
#43905: [Style – Content Style] Fehlende Auswahl von Accordeon-Elementen (akill)
#48282: [Style – Content Style] accordion in accordion with different styles isn't working correctly (akill)
#16121: [Tagging] tags with backslash ("\") don't work with desktop-tag-block (akill)
#46462: [Taxonomies] Sortierung funktioniert nicht (akill)
#45093: [Test & Assessment] Missing summary of the points in the column title in question pools and tests(!) (skergomard)
#47888: [Test & Assessment] Trying to score formula question sometimes leads to an exception (tjoussen)
#48163: [Test & Assessment] Incorrect behavior when clicking “Manual Scoring” (but only in certain cases) (tjoussen)
#48209: [Test & Assessment] Participants tab of a test no longer shows the number of participants (skergomard)
#48280: [Test & Assessment] Table sorting after grading in 'Manual Scoring' provokes faulty behaviour (tjoussen)
#48314: [Test & Assessment] Question selection in Manual Scoring does not respect the order of the questions (skergomard)
#48348: [Test & Assessment] Participants table is sorted by last name, but shows full name as <first name> <last name>, making it hard to use (skergomard)
#48353: [Test & Assessment] Need thousands of questions at the tip of your fingers? Just copy the question table and then reload the page a few times! (skergomard)
#48367: [Test & Assessment] File Upload Question: Action "Download All Files" leads to 404 Not Found (fschmid)
#48368: [Test & Assessment] Seitengestaltung in Test: Vollbild lässt sich nicht über das "x" schließen (skergomard)
#48407: [Test & Assessment] Manual Scoring by Question: "Scoring completed" cannot be revoked (skergomard)
#43920: [User Service] Creation of work space root node when user account is deleted (akill)
#48426: [User Tracking] Inhaltsseite: Statusänderung "Selbsteinschätzung für gesamtes Objekt" nicht an beschriebener Stelle zu finden (smeyer)
#45796: [WebDAV] WebDav: : Unit tests fail depending on execution order (fschmid)
#42969: [Wiki] Wiki > Settings > LTI Releases: Wrong tab/subtab display (akill)
#43530: [Wiki] Internal links don't support multilingual wiki pages (akill)
#44078: [Wiki] German pages are listed as orphaned when using multi language (akill)
#47674: [Wiki] The wiki print function does only print the master language (akill)
#48441: [Wiki] Page list is using the wrong CSS class (akill)
#48452: [Wiki] Wiki Creation Fails (akill)
#48423: [¥ Component] CLI setup update re-activates plugins that were deactivated by the administrator (tfuhrer)
#47315: [¥ File System] Preview Images of gifs look broken (fschmid)
#48382: [¥ IRSS – ILIAS Resource Storage Service] Some PHP-Warnings during mediaobject.ilMobMigration (fschmid)
#48198: [¥ Password] Very limited list of allowed (special) characters for user password (mjansen)
#48391: [¥ Tiny MCE] Underlined and strikethrough text in manual scoring not working (formatting removed after saving) (shepherd)
#48099: [¥ UI Components / KS] Data table “Select all/Unselect all” action only affects the first row and throws a JavaScript exception in the browser console (tfuhrer)
#48296: [¥ UI Components / KS] Table actions trigger (tfuhrer)

Full Screen