Mullvad VPN 2026.3

This release is for desktop only.

Here is a list of all changes since last stable release 2026.2:

Added

• Add port setting for LWO obfuscation.
• Add list of recent server selections in the select location view.
• Add context menu to locations in the select location view.
• GotaTun is now used as the userspace WireGuard implementation on all desktop platforms, not just

macOS. It replaces wireguard-go.

Changed

• Optimize LWO performance. This gives a 1.5 to 3 times speedup in our benchmarks.
• Change default retry connection attempts. LWO is now the third default

constraint. The relative order among the following constraints is preserved. (After=local-fs.target). This was assumed before, but not required (and is still not required).

• mullvad-daemon now installs the same shutdown handler for SIGHUP as SIGINT and SIGTERM.
• mullvad-daemon now exits without tearing down firewall rules on SIGUSR1.

This is used to avoid leaking network traffic when restarting systemd service.

Fixed

• Fix duplicate "Connected"/"Disconnected" desktop notifications caused by the daemon sending

multiple consecutive tunnel state events for the same state.

• Fix GUI appearing stuck in "Disconnecting" state when daemon transitions directly from error to

disconnected.

• Fix QUIC obfuscation not always being used if relays only had IPv6 addresses for QUIC.
• Fix a bug with Shadowsocks-based API access methods where some ciphers were configurable by

Mullvad VPN clients while not being supported by the system service.

• Fix IPv6 addresses not being allowed as endpoints for Socks5 and Shadowsocks API access methods.

that split tunneling still cannot be used simultaneously in different clients.

• Fix timeout when loading split tunnel driver during boot.

Security

• Remove ability for renderer process to execute arbitrary binaries. This is a defence-in-depth

measure to ensure that the renderer process does not have any capabilities beyond that of a regular user of the app. Affects platforms with the in-app updates feature, i.e. macOS and Windows. Fixes GHSA-h72f-j6r4-c3jc

<!-- The following artifacts will be included: MullvadVPN-2026.3.exe ( Size: 230M ) MullvadVPN-2026.3.exe.asc ( Size: 833 ) MullvadVPN-2026.3.pkg ( Size: 232M ) MullvadVPN-2026.3.pkg.asc ( Size: 833 ) MullvadVPN-2026.3_aarch64.rpm ( Size: 83M ) MullvadVPN-2026.3_aarch64.rpm.asc ( Size: 833 ) MullvadVPN-2026.3_amd64.deb ( Size: 103M ) MullvadVPN-2026.3_amd64.deb.asc ( Size: 833 ) MullvadVPN-2026.3_arm64.deb ( Size: 97M ) MullvadVPN-2026.3_arm64.deb.asc ( Size: 833 ) MullvadVPN-2026.3_arm64.exe ( Size: 116M ) MullvadVPN-2026.3_arm64.exe.asc ( Size: 833 ) MullvadVPN-2026.3_x64.exe ( Size: 114M ) MullvadVPN-2026.3_x64.exe.asc ( Size: 833 ) MullvadVPN-2026.3_x86_64.rpm ( Size: 89M ) MullvadVPN-2026.3_x86_64.rpm.asc ( Size: 833 ) -->