Version v9.3.3
With KeePass Client v9.2.0
Release Date
July 14, 2026
These Release Notes detail the differences between this release and the previous release.
Security
- A few security patches have been applied to address important security items affecting clients in various contexts. Immediate updates are strongly recommended.
- The scope of patches covers fixes of authorization controls, forged requests, and a social engineering vulnerability.
- Acknowledgements: Pleasant Solutions would like to thank a contributing security team (NCIA, NATO Communications and Information Agency) for their participation and cooperation with us, in protecting our customers.
-
Items:
-
1 - Item Summary
-
A security patch has been applied to protect controls, preventing the opportunity of potential exploits or vulnerabilities with authenticated users.
-
Prerequisites:
-
Attacker must be a currently authorized user with an active authenticated session.
-
-
Scope of Impact:
-
Potential unauthorized access to information
-
-
2 - Item Summary
-
A security patch has been applied to ensure proper validation of user-initiated requests within specific application workflows.
-
Prerequisites:
-
Authenticated user with an active session
-
User interaction with an attacker-crafted resource
-
-
Scope of Impact:
- Potential to perform unintended actions on behalf of the authenticated user, constrained to that user's permission level
-
3 - Item Summary
-
A security patch has been applied to address a data processing concern accessible to authenticated users under specific conditions.
-
Prerequisites:
- User interaction with an attacker modified object
-
Scope of Impact:
- Potential redirection of the user to an untrusted destination
-
4 - Item Summary
-
A security patch has been applied to improve request handling and validation within specific application workflows.
-
Prerequisites:
- Authenticated user with an active session
-
Scope of Impact:
- Potential for extremely limited information disclosure from the server environment
-
Compatibility Notes
- KeePass:
-
KeePass for Pleasant users should upgrade to 9.2.0 or higher
-
-
Server Prerequisite: Server Install file includes the required .NET 4.8 files for a one-time installation