v2.21.7 Latest$$$Ref:https://github.com/Windscribe/Desktop-App/releases/tag/v2.21.7$$$and https://windscribe.com/changelog/windows/$$$$$$AmneziaWG advanced anti-censorship support.$$$In-app user registration functionality.$$$Sound preview for sound notifications in preferences.$$$Favourite locations to preferences import/export.

v2.21.7 Latest$$$Ref:https://github.com/Windscribe/Desktop-App/releases/tag/v2.21.7$$$and https://windscribe.com/changelog/windows/$$$$$$AmneziaWG advanced anti-censorship support.$$$In-app user registration functionality.$$$Sound preview for sound notifications in preferences.$$$Favourite locations to preferences import/export.

v2.22.10 Latest$$$$$$8ab9bf0$$$Added$$$A ports command to the CLI.$$$Belarusian (Taraškievica) localization. Community contribution by dubovy-achvelak.$$$Support for the new server list v2 API.$$$Improved$$$Filtering of potentially malicious directives in OpenVPN custom configs to prevent a local privilege escalation.$$$No P2P icon to display per-city (datacenter) instead of per-country in the locations list.$$$BFE service status detection on Windows when SCM access is restricted from unelevated processes.$$$WireGuard PersistentKeepalive to use a value of 25 on all platforms.$$$HTTP ping to use IP address rather than hostname.$$$Field validation for custom WireGuard config import.$$$Non-critical scriptlet commands on Linux to be optional to prevent failures when reinstalling or upgrading.$$$Fixed$$$Application blocked by TLS fingerprinting in Russia.$$$AmneziaWG custom configs with valid H1-H4 ranges rejected by the security validator.$$$Possible local privilege escalation in the helper due to insufficient parameter validation before executing shell commands on macOS and Linux. We thank Johan Wahyudi for responsibly disclosing this issue.$$$IPC frame bounds checking to reject malformed or oversized messages.$$$Security vulnerability in ctrld command argument processing on macOS and Linux.$$$WireGuard custom config IP/CIDR validation to prevent command injection via crafted .conf files on Linux.$$$Command injection in CLI update handler on Linux.$$$Possible local privilege escalation and TOCTOU exploits in the macOS helper and installer.$$$Possible local privilege escalation and TOCTOU exploits in the Linux helper.$$$Potential privilege escalation during app update process on Linux.$$$WireGuard service may start then terminate immediately in a loop after wake from sleep on Windows.$$$Possible app crash when initiating an IKEv2 connection on Windows.$$$Potential deadlock at app start.$$$Factory reset does not fully reset preferences on macOS.$$$Call continuity doesnt work with firewall enabled on macOS.$$$OpenVPN TCP fails to connect when LAN proxy feature is enabled on macOS.$$$Multicast traffic not working on split tunneled apps on macOS.$$$Server sub-menus for the locations list in the OS tray menu should have a delay before being displayed.$$$Protocol indicates WireGuard while disconnected and selected location is an OpenVPN custom config.$$$WireGuard key limit dialog overlaps notification banners on app launch.$$$Standard/hashed login text overlaps when language set to Belarusian.$$$wsnet receiving system language rather than users preferred language.$$$News feed title is clipped and entry height miscalculated when entry is expanded.$$$Location list hover states broken after clicking main window.$$$Third-party custom config may no longer pass tunnel test.$$$Dropdown menus in Preferences scrolling to the wrong position.$$$El Salvador flag icon.$$$App does not consistently connect to the specific server that has the users pinned IP.$$$Purchased ALC locations cannot be selected.$$$Unnecessary VPN reconnection when switching between WiFi access points on the same network on macOS and Linux.$$$An app crash when on macOS when all app sessions are cleared via the website account page.$$$A potential crash while reinstalling the app on macOS.$$$A crash when interacting with credential fields on macOS.$$$P2P indicators not shown for premium locations.$$$Cannot connect to purchased individual locations because the UI shows them as premium-only.$$$Cannot connect with custom configs requiring credentials.$$$Bridge API session tokens not being cleared during logout and persistent settings cleanup.$$$Potential use-after-free crash when API handles outlive global wsnet teardown.$$$Advanced parameters not parsed after being written on Linux.$$$WireGuard reconnect fails after plan downgrade until app restart.$$$Protocol Tweaks toggle not enabling during fresh install on a Russian network.$$$Location nickname may be corrupted when best location changes.$$$Incorrect knowledge base URL i

v2.20.7$$$Added$$$Feature to clear Wi-Fi history. Details here.$$$Port selection on protocol change screen.$$$Support for hashed login. Details here$$$Improved$$$Logging & detection for abusers.$$$App robustness if the wstunnel process is killed or crashes on macOS.$$$Automatic DNS manager detection on Linux.$$$Edit box UX.$$$CLI commands to return success when it is already in the correct state.$$$WireGuard client IP determination and reduced dependency on server API.$$$Tray menu UX for Show/Hide; replacing it with just Show app on macOS and Linux.$$$Helper command robustness and removed unused commands.$$$Windows helper code organization and interaction with the Service Control Manager.$$$Locations resizing behaviour.$$$Window resizing behaviour and performance.$$$Font sizing and contrast.$$$Linux install scripts not to disable firewalld.$$$Fixed$$$Captcha compatibility issues for ScribeForce customers.$$$WireGuard connection may not reconnect after Windows wakes from sleep mode.$$$Description width on protocol screen.$$$Connecting to a static IP location may fail on WireGuard.$$$WireGuard connection failures when key limit is reached.$$$Multiple dropdowns showing at the same time on protocol screen.$$$Unsaved changes alert may bypass invalid DNS settings check.$$$Maximum log file size was too large. Now limited to 2 MB.$$$Potential app crash on launch.$$$App not displaying DNS conflict warning when a local DNS daemon is running and the custom DNS feature is enabled on macOS.$$$Installer binary displaying incorrect version number and copyright date on macOS.$$$Inclusive split tunneling route may not be added correctly on Linux.$$$Helper resource leak on macOS and Linux.$$$Editbox text may be cut off.$$$Back button from captcha screen.$$$IP rotate may be disabled unintentionally due to network changes.$$$Invalid interfaces in MAC spoofing interface dropdown on Linux.$$$Potential crash in logging.$$$Helper commands sometimes get stuck on macOS 26.$$$Package dependencies for arm64 architectures on Linux.$$$Split tunnel toggles may be drawn at incorrect position.$$$Tray icon sometimes cant be clicked on Linux.$$$Text alignment in preferences.$$$Scrollbar artifacts on curved border.$$$Visual artifact when switching to ROBERT preferences.$$$Context menu look on the custom config credentials prompt.$$$Freshly launched app may not clean up stale interface on macOS and Linux.$$$In-app data counter may be incorrect on macOS and Linux.$$$Linux script not retaining SELinux context.$$$Updated$$$ctrld to 1.4.9.$$$OpenVPN to 2.6.17.$$$curl to the official 8.17.0 release.$$$OpenSSL to 3.6.0; and deprecated use of oqsprovider for post-quantum algorithms.

v2.20.7$$$Added$$$Feature to clear Wi-Fi history. Details here.$$$Port selection on protocol change screen.$$$Support for hashed login. Details here$$$Improved$$$Logging & detection for abusers.$$$App robustness if the wstunnel process is killed or crashes on macOS.$$$Automatic DNS manager detection on Linux.$$$Edit box UX.$$$CLI commands to return success when it is already in the correct state.$$$WireGuard client IP determination and reduced dependency on server API.$$$Tray menu UX for Show/Hide; replacing it with just Show app on macOS and Linux.$$$Helper command robustness and removed unused commands.$$$Windows helper code organization and interaction with the Service Control Manager.$$$Locations resizing behaviour.$$$Window resizing behaviour and performance.$$$Font sizing and contrast.$$$Linux install scripts not to disable firewalld.$$$Fixed$$$Captcha compatibility issues for ScribeForce customers.$$$WireGuard connection may not reconnect after Windows wakes from sleep mode.$$$Description width on protocol screen.$$$Connecting to a static IP location may fail on WireGuard.$$$WireGuard connection failures when key limit is reached.$$$Multiple dropdowns showing at the same time on protocol screen.$$$Unsaved changes alert may bypass invalid DNS settings check.$$$Maximum log file size was too large. Now limited to 2 MB.$$$Potential app crash on launch.$$$App not displaying DNS conflict warning when a local DNS daemon is running and the custom DNS feature is enabled on macOS.$$$Installer binary displaying incorrect version number and copyright date on macOS.$$$Inclusive split tunneling route may not be added correctly on Linux.$$$Helper resource leak on macOS and Linux.$$$Editbox text may be cut off.$$$Back button from captcha screen.$$$IP rotate may be disabled unintentionally due to network changes.$$$Invalid interfaces in MAC spoofing interface dropdown on Linux.$$$Potential crash in logging.$$$Helper commands sometimes get stuck on macOS 26.$$$Package dependencies for arm64 architectures on Linux.$$$Split tunnel toggles may be drawn at incorrect position.$$$Tray icon sometimes cant be clicked on Linux.$$$Text alignment in preferences.$$$Scrollbar artifacts on curved border.$$$Visual artifact when switching to ROBERT preferences.$$$Context menu look on the custom config credentials prompt.$$$Freshly launched app may not clean up stale interface on macOS and Linux.$$$In-app data counter may be incorrect on macOS and Linux.$$$Linux script not retaining SELinux context.$$$Updated$$$ctrld to 1.4.9.$$$OpenVPN to 2.6.17.$$$curl to the official 8.17.0 release.$$$OpenSSL to 3.6.0; and deprecated use of oqsprovider for post-quantum algorithms.

v2.19.7$$$Release$$$Released 2026-01-05$$$Added$$$Individual toggle switches for split tunneling entries.$$$Slovak translations from GitHub user kubalav.$$$Greek (machine) translations.$$$Prompt to use protocol as preferred after successful protocol failover.$$$A backup endpoint for connectivity (tunnel) test in wsnet.$$$Improved$$$Connected DNS UX.$$$Sorting of countries by latency.$$$Protocol selection after failover.$$$Manual connection mode to try alternate datacenter server; if available; when first connection attempt fails.$$$Docked tray behaviour on Windows.$$$UX when split tunneling is enabled but the macOS system extension has not been approved.$$$German translations provided by GitHub user Evonos.$$$Logging for account abuse.$$$Fixed$$$OpenVPN protocols not working on openSUSE Tumbleweed.$$$Linux share proxy sometimes not working; particularly on CLI after reboot.$$$IPv4/v6 DNS priority while connected on Linux.$$$ctrld may not be terminated after disconnecting when using custom DNS preference.$$$Protocol failover may cause IP pinning to fail.$$$Firewall label may be too long with some languages.$$$One-time override not showing preferred protocol prompt.$$$Background scaling issues on high DPI displays.$$$Initial unhover opacity for IP utilities menu.$$$Dropdown item order for sound notifications.$$$Scrollbar was cutting off hover effect from location row.$$$Window may extend beyond bottom of screen.$$$A potential crash when clicking the login button multiple times.$$$ws-no-pings advanced parameter is not respected.$$$Rotating IP repeatedly and quickly may hit a rate limit.$$$GUI misalignment and font when proxy gateway/secure hotspot are enabled.$$$The login username input box losing focus when using the trackpad on macOS.$$$Preferred protocol prompt should not be shown on IP rotate.$$$A height calculation error for error descriptions.$$$Installer background does not show on macOS 26.2 Beta.$$$Tooltips not working at app launch until user clicks the main window on Linux.$$$Qt log spam on Windows and Linux.$$$Updated$$$OpenVPN to 2.6.16.$$$7zr utility to 25.01 on Windows.

v2.19.7$$$Release$$$Released 2026-01-05$$$Added$$$Individual toggle switches for split tunneling entries.$$$Slovak translations from GitHub user kubalav.$$$Greek (machine) translations.$$$Prompt to use protocol as preferred after successful protocol failover.$$$A backup endpoint for connectivity (tunnel) test in wsnet.$$$Improved$$$Connected DNS UX.$$$Sorting of countries by latency.$$$Protocol selection after failover.$$$Manual connection mode to try alternate datacenter server; if available; when first connection attempt fails.$$$Docked tray behaviour on Windows.$$$UX when split tunneling is enabled but the macOS system extension has not been approved.$$$German translations provided by GitHub user Evonos.$$$Logging for account abuse.$$$Fixed$$$OpenVPN protocols not working on openSUSE Tumbleweed.$$$Linux share proxy sometimes not working; particularly on CLI after reboot.$$$IPv4/v6 DNS priority while connected on Linux.$$$ctrld may not be terminated after disconnecting when using custom DNS preference.$$$Protocol failover may cause IP pinning to fail.$$$Firewall label may be too long with some languages.$$$One-time override not showing preferred protocol prompt.$$$Background scaling issues on high DPI displays.$$$Initial unhover opacity for IP utilities menu.$$$Dropdown item order for sound notifications.$$$Scrollbar was cutting off hover effect from location row.$$$Window may extend beyond bottom of screen.$$$A potential crash when clicking the login button multiple times.$$$ws-no-pings advanced parameter is not respected.$$$Rotating IP repeatedly and quickly may hit a rate limit.$$$GUI misalignment and font when proxy gateway/secure hotspot are enabled.$$$The login username input box losing focus when using the trackpad on macOS.$$$Preferred protocol prompt should not be shown on IP rotate.$$$A height calculation error for error descriptions.$$$Installer background does not show on macOS 26.2 Beta.$$$Tooltips not working at app launch until user clicks the main window on Linux.$$$Qt log spam on Windows and Linux.$$$Updated$$$OpenVPN to 2.6.16.$$$7zr utility to 25.01 on Windows.

v2.19.7$$$Release$$$Released 2026-01-05$$$Added$$$Individual toggle switches for split tunneling entries.$$$Slovak translations from GitHub user kubalav.$$$Greek (machine) translations.$$$Prompt to use protocol as preferred after successful protocol failover.$$$A backup endpoint for connectivity (tunnel) test in wsnet.$$$Improved$$$Connected DNS UX.$$$Sorting of countries by latency.$$$Protocol selection after failover.$$$Manual connection mode to try alternate datacenter server; if available; when first connection attempt fails.$$$Docked tray behaviour on Windows.$$$UX when split tunneling is enabled but the macOS system extension has not been approved.$$$German translations provided by GitHub user Evonos.$$$Logging for account abuse.$$$Fixed$$$OpenVPN protocols not working on openSUSE Tumbleweed.$$$Linux share proxy sometimes not working; particularly on CLI after reboot.$$$IPv4/v6 DNS priority while connected on Linux.$$$ctrld may not be terminated after disconnecting when using custom DNS preference.$$$Protocol failover may cause IP pinning to fail.$$$Firewall label may be too long with some languages.$$$One-time override not showing preferred protocol prompt.$$$Background scaling issues on high DPI displays.$$$Initial unhover opacity for IP utilities menu.$$$Dropdown item order for sound notifications.$$$Scrollbar was cutting off hover effect from location row.$$$Window may extend beyond bottom of screen.$$$A potential crash when clicking the login button multiple times.$$$ws-no-pings advanced parameter is not respected.$$$Rotating IP repeatedly and quickly may hit a rate limit.$$$GUI misalignment and font when proxy gateway/secure hotspot are enabled.$$$The login username input box losing focus when using the trackpad on macOS.$$$Preferred protocol prompt should not be shown on IP rotate.$$$A height calculation error for error descriptions.$$$Installer background does not show on macOS 26.2 Beta.$$$Tooltips not working at app launch until user clicks the main window on Linux.$$$Qt log spam on Windows and Linux.$$$Updated$$$OpenVPN to 2.6.16.$$$7zr utility to 25.01 on Windows.

Windows$$$Added location renaming feature.$$$Added support for local DNS as connected DNS.$$$Improved client log when unable to retrieve WireGuard config from server.$$$Improved anti-censorship mechanisms.$$$Improved IPC communication between the client and helper/service.$$$Improved consistency of install package naming.$$$Improved confusing No P2P icon.$$$Improved flag assets.$$$Improved UX when unable to connect to the Windscribe helper/service.$$$Improved installer language detection to use app language if available.$$$Improved behavior when the firewall is on and the app exits unexpectedly.$$$Improved UX and fixed text overlaps on the static IPs screen.$$$Fixed searching for nicknames not working after location renaming feature.$$$Fixed Ecuador flag.$$$Fixed the app freezing on exit.$$$Fixed cursor may not change when a location becomes disabled/enabled.$$$Fixed static IP link color may be incorrect.$$$Fixed firewall may be briefly incorrectly disabled after in-app update.$$$Fixed static IP locations that are unavailable are not displayed.$$$Fixed window height is cut off if window transitions while being dragged.$$$Fixed Best Location is chosen incorrectly.$$$Fixed installer buttons not being transparent.$$$Fixed unhandled -os_restart argument in the installer from older app versions.$$$Fixed latency bars display full strength when ping information is not available/failed for the location.$$$Fixed translations for Arabic/Farsi in Decoy Traffic.$$$Fixed incorrect comparison when importing renamed locations.$$$Fixed custom config name is truncated too short.$$$Updated OpenVPN to 2.6.13.$$$Updated Qt to 6.8.3.$$$Updated ctrld to 1.4.3.$$$Updated liboqs to 0.12.0 and oqs-provider to 0.7.0.$$$Removed -no-drivers argument from installer.$$$Removed code usage of Qt5 compatibility module.

Windows$$$Added location renaming feature.$$$Added support for local DNS as connected DNS.$$$Improved client log when unable to retrieve WireGuard config from server.$$$Improved anti-censorship mechanisms.$$$Improved IPC communication between the client and helper/service.$$$Improved consistency of install package naming.$$$Improved confusing No P2P icon.$$$Improved flag assets.$$$Improved UX when unable to connect to the Windscribe helper/service.$$$Improved installer language detection to use app language if available.$$$Improved behavior when the firewall is on and the app exits unexpectedly.$$$Improved UX and fixed text overlaps on the static IPs screen.$$$Fixed searching for nicknames not working after location renaming feature.$$$Fixed Ecuador flag.$$$Fixed the app freezing on exit.$$$Fixed cursor may not change when a location becomes disabled/enabled.$$$Fixed static IP link color may be incorrect.$$$Fixed firewall may be briefly incorrectly disabled after in-app update.$$$Fixed static IP locations that are unavailable are not displayed.$$$Fixed window height is cut off if window transitions while being dragged.$$$Fixed Best Location is chosen incorrectly.$$$Fixed installer buttons not being transparent.$$$Fixed unhandled -os_restart argument in the installer from older app versions.$$$Fixed latency bars display full strength when ping information is not available/failed for the location.$$$Fixed translations for Arabic/Farsi in Decoy Traffic.$$$Fixed incorrect comparison when importing renamed locations.$$$Fixed custom config name is truncated too short.$$$Updated OpenVPN to 2.6.13.$$$Updated Qt to 6.8.3.$$$Updated ctrld to 1.4.3.$$$Updated liboqs to 0.12.0 and oqs-provider to 0.7.0.$$$Removed -no-drivers argument from installer.$$$Removed code usage of Qt5 compatibility module.

Added Decoy Traffic feature.$$$Added extended cleanup logs in wsnet.$$$Improved uninstaller folder security.$$$Improved build process to produce statically linked executables.$$$Improved Windows-on-Arm installer to use arm64 7-zip extractor.$$$Improved custom connected DNS error UX.$$$Improved flow when user enables Show notifications but system notifications are disabled.$$$Improved initialization and preferences animations.$$$Improved log frequency in wsnet.$$$Improved reliability of wsnet in unstable network environments.$$$Improved ping logging.$$$Improved detection and logging of failures in the client<->helper communication mechanism.$$$Improved the Decoy Traffic feature to upload and download independently; and improved its UI.$$$Improved reliability of wsnet in unstable network environments.$$$Fixed location tab transitions to search tab even when modifier keys are pressed.$$$Fixed automatic-mode firewall remains on when Windows is restarted and the app is closed to the tray.$$$Fixed app remains running; but non-functioning; if user cancels OS shutdown.$$$Fixed app is launched minimized instead of minimized to tray when Start Minimized and Close to Tray are enabled.$$$Fixed start minimized not working by reinstating workaround.$$$Fixed docked window is sometimes in the wrong position.$$$Fixed app stuck during login after accepting prompt to ignore SSL errors.$$$Fixed incorrect post quantum KE algorithm.$$$Fixed app does not retry login if first attempt failed due to lack of connectivity.$$$Fixed Allow LAN traffic precedence.$$$Fixed mangled ar/fa translations.$$$Fixed VPN interface network category is public.$$$Fixed install fails if uninstall registry information is missing.$$$Fixed incorrect characters displayed in installer bootstrap error message.$$$Fixed System notifications are disabled alert shown unexpectedly.$$$Fixed app update fails when using pre-2.4 app.$$$Fixed installer alerts may not fit in window for some translations.$$$Fixed reset date being shown on account screen instead of expiry date for some plans.$$$Fixed 2FA code expires before working endpoint can be found [wsnet].$$$Fixed disconnecting due to out of data turns off firewall.$$$Fixed incorrect check for LAN address for custom DNS.$$$Fixed inconsistent behavior when starting app and close to tray is enabled.$$$Fixed window size after dismissing alert at the login window.$$$Fixed error message box may be displayed by Windows when reinstalling deleted/disabled Windscribe service.$$$Removed DLL injection mitigation due to false positives.$$$Removed IPv6 split tunneling (for now) due to edge cases.$$$Removed some log spam.$$$Updated wstunnel dependency to v1.0.5. Adds support for anti-censorship TLS stuffing.$$$*** Known Issue ***$$$$$$The Circumvent Censorship feature does nothing when using the TCP protocol due to a missing feature in the OpenVPN DCO driver. If you require use of the TCP protocol and the Circumvent Censorship feature; you can add ws-use-openvpn-wintun to the Advanced Parameters setting to force the use of the wintun driver.

Added IPv6 support for split tunneling.$$$Added static IP support in CLI.$$$Added toggle to enable proxy gateway only while VPN is connected; based on contributions from GitHub user intangir.$$$Added h3:// and sdns:// protocol support for ctrld (custom DNS preference).$$$Added a changelog link in the About preferences screen.$$$Added back translation keys for Release and Beta release channels.$$$Improved location ordering when searching.$$$Improved network detection and minimized location service requests on Windows 11 24H2.$$$Improved UX for some CLI commands.$$$Improved CLI entry of credentials when logging in.$$$Improved Japanese translations from GitHub user Ue05.$$$Improved Russian translations from GitHub user MedicalJewel105.$$$Improved login/logout CLI flow.$$$Improved UX and performance when dragging windows to different screens.$$$Improved installer to notify the user if the helper service fails to install.$$$Improved error reporting if installation to a custom folder fails.$$$Improved logs in the client.$$$Fixed potential local privilege escalation vulnerability in the installer bootstrap.$$$Fixed autoconnect attempting to connect to invalid locations.$$$Fixed scroll position not retained when leaving/reentering a window.$$$Fixed importing JSON may put the Secure Hotspot preference in an invalid state.$$$Fixed changelog link for many platforms was incorrect in General Preferences.$$$Fixed incorrect firewall rule blocking IPv6 during inclusive split tunnel.$$$Fixed missing interface in MAC spoofing dropdown.$$$Fixed a potential program quit hang [wsnet].$$$Fixed custom config path not checked when importing preferences.$$$Fixed missing null pointer checks in the client application.$$$Fixed window cant be dragged to a screen above the initial screen.$$$Fixed window is invisible when app is docked and device pixel ratio is not 1.$$$Fixed Static IP commands in CLI with GUI backend.$$$Fixed the Ecuador flag.$$$Removed ability to use Secure Hotspot together with inclusive split tunneling.$$$Removed IPv6 toggle in preferences.$$$Updated ctrld; utilized by the custom DNS preference; to 1.3.10.$$$$$$*** Known Issue ***$$$$$$The Circumvent Censorship feature does nothing when using the TCP protocol due to a missing feature in the OpenVPN DCO driver. If you require use of the the TCP protocol and the Circumvent Censorship feature; you can add ws-use-openvpn-wintun to the Advanced Parameters setting to force the use of the wintun driver.

Added IPv6 support for split tunneling.$$$Added static IP support in CLI.$$$Added toggle to enable proxy gateway only while VPN is connected; based on contributions from GitHub user intangir.$$$Added h3:// and sdns:// protocol support for ctrld (custom DNS preference).$$$Added a changelog link in the About preferences screen.$$$Added back translation keys for Release and Beta release channels.$$$Improved location ordering when searching.$$$Improved network detection and minimized location service requests on Windows 11 24H2.$$$Improved UX for some CLI commands.$$$Improved CLI entry of credentials when logging in.$$$Improved Japanese translations from GitHub user Ue05.$$$Improved Russian translations from GitHub user MedicalJewel105.$$$Improved login/logout CLI flow.$$$Improved UX and performance when dragging windows to different screens.$$$Improved installer to notify the user if the helper service fails to install.$$$Improved error reporting if installation to a custom folder fails.$$$Improved logs in the client.$$$Fixed potential local privilege escalation vulnerability in the installer bootstrap.$$$Fixed autoconnect attempting to connect to invalid locations.$$$Fixed scroll position not retained when leaving/reentering a window.$$$Fixed importing JSON may put the Secure Hotspot preference in an invalid state.$$$Fixed changelog link for many platforms was incorrect in General Preferences.$$$Fixed incorrect firewall rule blocking IPv6 during inclusive split tunnel.$$$Fixed missing interface in MAC spoofing dropdown.$$$Fixed a potential program quit hang [wsnet].$$$Fixed custom config path not checked when importing preferences.$$$Fixed missing null pointer checks in the client application.$$$Fixed window cant be dragged to a screen above the initial screen.$$$Fixed window is invisible when app is docked and device pixel ratio is not 1.$$$Fixed Static IP commands in CLI with GUI backend.$$$Fixed the Ecuador flag.$$$Removed ability to use Secure Hotspot together with inclusive split tunneling.$$$Removed IPv6 toggle in preferences.$$$Updated ctrld; utilized by the custom DNS preference; to 1.3.10.$$$$$$*** Known Issue ***$$$$$$The Circumvent Censorship feature does nothing when using the TCP protocol due to a missing feature in the OpenVPN DCO driver. If you require use of the the TCP protocol and the Circumvent Censorship feature; you can add ws-use-openvpn-wintun to the Advanced Parameters setting to force the use of the wintun driver.