1.7.61

Released on June 18, 2026

Improvements​

• Added 2FA for OpenAdmin, options for resellers and admins to configure their 2FA, and option for admins to view stauts for users, and option for Super Admin to disable per user.
• Refactored search functionality in OpenPanel UI.
• reduced Redis writes by ~95% for active users by adding 1 expired check per 60s.
• default limits are now shown on OpenAdmin > Services > Service Limits and OpenAdmin > Services > Edit Defaults pages.
• Added twofa_enforce option that forces users to configure 2FA before accessing any other pages.
• Env variables that contain passwords are now hidden on OpenAdmin > Users > single user > Services page.
• Sentinel service will now check if systemd service was disabled by Administrator before performing restart.
• Added option in OpenAdmin > Users > single user > Permissions to edit permissions just for this user.
• Added OS installation test tasks to automatically verify OpenPanel installation across all supported operating systems and update the README with the latest validation status, including the most recent check timestamp.
• Improvements to opencli sentinel script.
• Separate /api/ calls to API.py module #949
• max_email_quota and max_hourly_email are now visible in WHMCS module for plan details
• extend user/transfer script to also use new columsn we ahve for plans #158
• Added warning messages on install for RHEL10 when iptables are missing for 969 and #970.
• Added /server/resource-usage/history on OpenAdmin that allows admins to view reosurce usage history for last 30 days.
• Refactored domains-add process.
• Added options to vlaidate connection to slave server and remove it from OpenAdmin > Domains > DNS Cluster page.
• Implemented rndc-based notification instead of SSH.
• Added support for TLSA DNS records in OpenPanel > Zone Editor and option to auto-generate record from the current SSL certificate for a domain.
• Added options to bulk-edit email accounts from OpenAdmin > Emails > Accounts: change password, restrict sending/receiving, change quota, delete.
• Refactored FileManager front-end code.
• jQuery is removed from all OpenPanel UI templates.
• Added 'no data' messages to ftp connections and dynamic dns pages.
• Added frontend validations for VHosts Editor.
• Added reseller_rename option for OpenAdmin notifications.
• skip ssh welcome message on openadmin terminal.
• Added hard-enforced 10 results limits for file and folders search in FileManager.
• Cached disk usage and inodes data for user's Dashboard page is now invalidated after FileManager actions: upload, extract,copy, compress, delete, edit and for MySQL Database import process.
• phpmyadmin_port removed from Server Information page.
• Improvements to WP Autoinstaller page.
• Redesigned installer pages for WordPress, NodeJS/Python and WebsiteBuilder.
• Mautic module is removed for new installations.

Security​

• Bump flask from 3.1.2 to 3.1.3
• Bump idna from 3.11 to 3.15
• Bump werkzeug from 3.1.4 to 3.1.6
• Bumps pyjwt from 2.10.1 to 2.13.0
• Bump requests from 2.32.5 to 2.33.0
• Bumps mysql-connector-python from 8.3.0 to 9.1.0
• Bumps filelock from 3.20.1 to 3.20.3

🐛 Bug Fixes​

• Logo not visible on mobile #950
• Daily Usage email style broken #954
• Option to change reseller user for OpenPanel account #962
• Fixed bugs on opencli ftp- commands failing if username and docker context are not the same (user was renamed).
• WHMCS module installation returned an error #6
• Node/Py auto-installer fails if app anme starts with a number #963
• Extend user-transfer to detect email folder setting from admin.ini and then to sync that user mail folders if out of their homedir #159
• some actions dont trigger admin notifications #924
• Fixed OCI runtime exec failed: exec failed: unable to start container process: exec: "bash": executable file not found in $PATH on opencli docker <USERNAME> backup command.
• Editing backup settings in GUI shows 3 notifications #973
• Editing backup settings in GUI stops&starts the backup process, interrupting any backups in progress #974
• Fixed css bugs on OpenAdmin > Domains > Delete modal.
• Sites page shows invalid relative time (-1 days ago) with timezone mismatch #93
• Bug in OpenPanel UI on /emails/new #975
• OpenLiteSpeed: WordPress cannot install plugins/themes (wp-content not writable, upgrade dir not created) #925
• Fixed crrash on /files.trash/deleteall in File Manager (trash_dir is a string but the code calls .iterdir() and string division on it as if it were a Path object).
• Fixed error on opencli dev on RHEL9 installing fzf.
• Fixed bug in validate_wget_url - that didn't block all internal ranges (SSRF).
• Fixed issue in files() route builds directory path without secure_user_path.
• Fixed bug with UPLOAD_LIMIT for phpmyadmin service not being set due to the missing unit.
• Fixed bug on file eidt that caused the activity log to show file was edited wven if saving teh content fails.
• File operations executed via admin autologin into user panel have root privileges #976
• Fixed bug on reseller rename that failed to update owner for exisiting users owned by that reseller.
• Fixed bug deleting system user on RHEL due to deluser command.
• Fixed bug /usr/local/opencli/user/add.sh: line 594: /etc/apparmor.d/home.testinguser.bin.rootlesskit: No such file or directory on user creation on RHEL.
• Fixed bug on install when license key is set failing to setup docker volumes for emails causing permission issues.
• Fixed syntax error on creating ftp users.
• Fixed bug: rndc.key key is missing for bind when installed with --skip-dns-server and Admin later enables the DNS module.
• Fixed error on changing ftp suer password.