# KeePassXC software updates and security patches

> Live situation record from CLSTR: https://clstr.news/situations/keepassxc-software-updates-and-security-patches
> Updated: 2026-10-21T22:28:27.000Z. Sources: 3. Developments: 2.

The open-source password manager KeePassXC transitioned from the release of version 2.8.0-beta1 to the stable release of version 2.8. 

Both updates centered on a major technical migration from Qt5 to Qt6 to improve graphics and multi-monitor performance. Key functional improvements for Linux users included native Auto-Type support within Wayland sessions via XDG Desktop Portals and a Polkit-based ‘Quick Unlock’ feature for fingerprint authentication. The software also introduced remote database synchronization via SFTP or SCP, native ARM64 builds for Windows, and an integrated SSH Agent capable of generating RSA, ECDSA, and Ed25519 keys.

The stable 2.8 release specifically addressed five security vulnerabilities identified in versions 2.7.x and earlier. These included a use-after-free error during legacy KDB database imports (CVE-2026-69150), browser-integration issues, and a Windows-specific concern regarding SSH key sharing with Pageant. Developers noted that while AI-assisted analysis helped identify these flaws, none originated from AI-generated code.

## Claims

- KeePassXC has released version 2.8. (corroborated by 3 sources)
- The software migrated from Qt 5 to Qt 6. (corroborated by 3 sources)
- Auto-Type functionality now works on Linux Wayland using XDG Desktop Portals. (corroborated by 3 sources)
- A Quick Unlock feature has been added for Linux using Polkit. (corroborated by 3 sources)
- The update includes native ARM support for Windows. (corroborated by 2 sources)
- The integrated SSH Agent can generate RSA, ECDSA, and Ed25519 keys. (corroborated by 2 sources)
- CVE-2026-69150 is a use-after-free error related to importing KDB files. (corroborated by 2 sources)
- Five security vulnerabilities in versions 2.7.x and earlier were fixed. (single source)

## Timeline

### 2026-10-21: KeePassXC releases version 2.8 with Wayland and Qt 6 support

KeePassXC 2.8 is released, featuring a migration to Qt 6, Wayland Auto-Type support for Linux, native ARM support, and security fixes for several low-to-moderate severity vulnerabilities.

3 sources. https://clstr.news/cluster/keepassxc-releases-version-28-with-wayland-and-qt-6-support

### 2026-09-23: KeePassXC releases 2.8.0-beta1 with Qt6 and Wayland support

KeePassXC has released version 2.8.0-beta1, featuring a Qt6 UI migration, native Wayland Auto-Type support, remote database synchronization via SFTP/SCP, and native ARM64 support for Windows.

2 sources. https://clstr.news/cluster/keepassxc-releases-280-beta1-with-qt6-and-wayland-support

---
Cite as: KeePassXC software updates and security patches. CLSTR, https://clstr.news/situations/keepassxc-software-updates-and-security-patches