Kdenlive 26.04.1: Open-Source Video Editor from KDE Gets Critical Security Update

Kdenlive 26.04.1: Open-Source Video Editor from KDE Gets Critical Security Update
This article is available in Arabic اقرأ بالعربية

Kdenlive: Professional Video Editing for Everyone

Kdenlive (full name: KDE Non-Linear Video Editor) is one of the most powerful and mature open-source video editors available. It runs on Linux, Windows, macOS, and BSD, delivering a non-linear editing experience that competes with commercial software.

🔗 Official Website: kdenlive.org


Version 26.04.1 — What’s New?

On May 9, 2026, the Kdenlive team announced version 26.04.1, the first maintenance release in the 26.04 series. This release includes:

  • A critical security fix (all users strongly advised to upgrade immediately)
  • The usual batch of stability fixes
  • Workflow improvements

🔒 The Security Fix — Why This Update Is Mandatory

Thanks to an NLnet/NGI0 grant, Kdenlive underwent a security audit provided by Radically Open Security. The audit discovered one serious vulnerability that can occur when opening a malicious project file, allowing remote code execution.

This vulnerability is fully fixed in Kdenlive 26.04.1. Special thanks to Edoardo Geraci and Radically Open Security for helping us make our software safer!

Important: There are no reports of this vulnerability being exploited so far. This security issue is specifically about manipulated .kdenlive project files containing potentially malicious code — meaning it is only relevant if you open a project file that you received from someone else or downloaded from the internet.

If you cannot upgrade right now:

Do not open any project file that was not created by you.

Additional Protection Layer

Although the vulnerability is fixed in 26.04.1, the team has also implemented another layer of security checks for the upcoming 26.08.0 release to warn users if any unexpected input is detected in a project file.


Full Changelog (Abridged)

Security & Stability Fixes

  • Fix critical RCE vulnerability via malicious project files
  • Fix crash cutting subtitle on layer > 0
  • Fix crash closing app through welcome screen close button
  • Fix freeze canceling project recovery
  • Fix trying to access audio device before permission confirmed (macOS)

UI & Workflow Improvements

  • Fix Clip Monitor playhead position when switching clips
  • Fix tab order in create color clip dialog
  • Bin icon mode: show folder indicator when item has zones
  • Double-clicking a sequence opens it in timeline even if it has subclips

macOS-Specific Fixes

  • Explicitly request mic permission
  • Fix app permissions
  • Fix monitor offset with transform on zoom

General Improvements

  • Transition previews switched to GIF format (since most binaries don’t encode webp)
  • Clean up audio level code, fix possible crash when adding first clip
  • Limit number of supported layers in subtitles

How to Update or Install

Linux (Officially Supported Formats by Kdenlive Team)

# AppImage (all distributions)
chmod +x kdenlive-26.04.1-x86_64.AppImage
./kdenlive-26.04.1-x86_64.AppImage

# Flatpak (recommended)
flatpak install flathub org.kde.kdenlive
flatpak update org.kde.kdenlive

Windows

Download the installer from the official download page

macOS

Download the DMG file from the official download page

From Package Managers (Linux Distributions)

Version 26.04.1 may not be immediately available in some distribution repositories. Using Flatpak or AppImage is recommended to get the latest version.


Warning: Daily Builds

Kdenlive also offers daily builds containing the latest features and bug fixes, but they are for testing only:

⚠️ Warning: These builds may be unstable and can corrupt existing project files. Only recommended for testing new features.


Why Kdenlive Is an Excellent Choice for the FOSS Community

Feature Kdenlive
License GPLv2+
Development Platform KDE Frameworks / Qt
Platform Support Linux, Windows, macOS, BSD
Technical Backend FFmpeg, MLT Framework
Professional Features Color correction, effects, transitions, chroma key, unlimited layers
Hardware Acceleration VAAPI, NVENC, AMD VCE support
Community Very mature, thousands of contributors

Kdenlive is more than just a video editor — it’s a KDE project that prioritizes privacy, freedom, and performance, with an active community and rapid development pace.


Summary

If you’re looking for a professional, free, and open-source video editor that works excellently on Linux, Kdenlive is the best choice.

Version 26.04.1 is a routine maintenance update, but it contains a critical security fix that makes upgrading mandatory for all users. Don’t hesitate — update now.