tacticalrmm

Changelog

• Native File Browser: a fully native file browser with no MeshCentral dependency. Browse, create, rename and delete files and folders, upload and download with pause and resume, download folders as ZIP archives, and extract ZIP files directly on the agent. With the native terminal and now the file browser, we're just one release away from being fully off MeshCentral: the next release will include our own native remote desktop solution. See details and screenshots at the bottom. A video demo is available here: https://youtu.be/ufdXwdixurg
• The installer and restore scripts now support Debian 13 and Ubuntu 26.04. In-place OS upgrades are NOT supported, you must do a backup/restore. Please read the Operating System Support section below before upgrading your OS.
• The macOS agent is now signed with our Apple Developer ID. macOS privacy permissions such as Full Disk Access now stay granted when the agent updates, and you can pre-approve them for your fleet with a PPPC profile from your MDM. The Team ID, signing identifier and code requirement are in the documentation. Important: existing Mac agents will lose Full Disk Access and Accessibility once when they update to v2.12.0, and these need to be granted again (or pre-approved with a PPPC profile before updating), see the documentation.
• Server performance has been greatly improved. This lowers server load, especially on instances with a high number of agents or with lots of checks and tasks that run frequently.
• #2524 The agent History tab and the agent history API are now paginated. Previously, requesting the history of all agents could return the entire history table at once and run the server out of memory on large installs.
• Fixed an issue where the background workers (Celery) could hang and stop processing tasks.
• The monitoring status endpoint (/core/v2/status/) now reports a Celery heartbeat (celery_heartbeat_age, celery_heartbeat_health), so you can alert when background tasks stop running.
• Fixed the web interface not reconnecting its websocket after logging back in, which required a hard refresh of the browser.
• Fixed long output not scrolling in the Run Script and Test Script dialogs.
• Fixed characters typed quickly in the native terminal sometimes arriving out of order.
• The update script now upgrades Node.js to version 24 if your server is on version 20 or older. It also warns if your server is still running Debian 11, which is end of life.
• Updated MeshCentral to 1.3.1, a MeshCentral release with security fixes. Because of the way Tactical RMM integrates with MeshCentral, Tactical RMM instances should not be affected, but we still recommend updating as soon as you can.
• Various dependency updates.

Native File Browser

This release introduces a fully native file browser, built entirely on the Tactical RMM agent and web interface. It does not depend on MeshCentral, and it is around 3x faster than the legacy MeshCentral-based file browser. After the native terminal, this is the second of the three MeshCentral-backed features (terminal, file browser, remote desktop) to be reimplemented natively.

To open it: right-click an agent > Remote Background > File Browser.

• Browse, create, rename and delete files and folders, with sorting and a name filter.
• Upload files (including drag and drop) and download files, or whole folders as a ZIP archive.
• Extract ZIP files directly on the agent.
• Pause and resume transfers, even after a page refresh. Transfers recover on their own from network drops and ser

Changelog

• Fixed a memory leak when processing policy checks and automated tasks. This also significantly reduces server CPU usage and processing time, improving overall server performance.
• Fixed Windows Update cleanup to remove superseded updates that are no longer reported by the Windows API and are not installed.
• Fixed email sending for mail servers that use secure connections on port 465. Thanks to @jptamayo76 for contributing the patch.
• Fixed hidden alerts appearing in the Alerts Overview.
• Updated the server to Python 3.12. Note: this update will take a few minutes longer than usual because Python needs to be compiled during the upgrade.
• Updated MeshCentral to 1.2.4, which fixes the black screen issue when using remote control on macOS 15 and newer. For affected agents, first remove the meshagent from Privacy & Security > Accessibility and Screen & System Audio Recording using the minus (-) button. Then fully uninstall and reinstall the Tactical RMM agent, which will reinstall the bundled meshagent, and grant the permissions again when prompted. Check the documentation for more details. We are also developing our own native remote control solution, which already supports macOS and is currently in QA. Since the MeshCentral fix is temporary, you can also wait for our native remote control release instead of reinstalling affected agents now.

Changelog

• Native Terminal: a fully native terminal with no MeshCentral dependency, configurable global and per-agent shell defaults, on-the-fly shell switching, and run-as system/user support. See details and screenshots at the bottom. A short video demo is available here: https://youtu.be/ZZfnmpldL4Q
• The agent recovery functions now perform a complete unattended reinstall/recovery, which is especially helpful in cases where an agent has been removed due to Antivirus false positives.
• Added rate limiting protection for login endpoints to help prevent brute-force attacks; see the documentation for configuration details, troubleshooting, and monitoring current rate limit status.
• Fixed a bug in the registry editor where large registry entries could fail to load or display correctly.
• #2440 Fixed an issue preventing the agent from installing on Apple M5 Macs.
• Fixed the Send Command "Live Stream" mode so commands run as the selected user (when "Run As User" is enabled) instead of running as SYSTEM.
• "Run as User" on Windows now uses the user’s elevated admin context when available, so commands, scripts, and terminal sessions no longer run with the user’s limited permissions even if they are a local administrator.
• Fixed several underlying issues in the Alerts Manager, including a case where tasks configured to run on check failure would not execute.
• #2388 #2478 Fixed a regression from the previous release where the agent hostname was missing from the subject of resolved alert emails.
• Windows Update schedules now install manually approved patches even when auto-approval is disabled.
• Updated the bundled portable Python on Windows to version 3.14.5
• Added search to the Manual Agent Update dialog to quickly filter the agent list.
• Fixed several edge cases affecting Linux agent installation.
• MeshCentral has been updated to 1.2.0, which includes a database migration to improve event cleanup performance on large databases. Note: on installations with a large event history, MeshCentral may be unresponsive for a while (we have seen this take 4 hours in some cases) after the update while this migration runs in the background. This is expected, allow it time to finish. Take Control and File Browser will not work while the migration is in progress. You might also need to manually add an index if the issue doesn't resolve on its own, see https://github.com/amidaware/tacticalrmm/discussions/2495 for instructions.
• Various dependency updates.
• v1.5.1: fixed a regression in v1.5.0 that was preventing alert webhooks from sending

Native Terminal

This release introduces a fully native terminal, built entirely on the Tactical RMM agent and web interface. It does not depend on MeshCentral. This is the first of the three MeshCentral-backed features (terminal, file browser, remote desktop) to be reimplemented natively, with the other two to follow in future releases.

Global shell defaults can now be configured under Global Settings > General, applied to all agents:

• Windows: CMD, PowerShell, or a custom shell specified by full path (e.g. C:\Program Files\PowerShell\7\pwsh.exe)
• Linux: Bash or a custom shell (e.g. /usr/bin/fish)
• macOS: bash or a custom shell (e.g. /bin/zsh)

Individual agents inherit the global default but can be overridden under the agent's edit settings, allowing a different shell per agent:

Changelog

• Native Terminal: a fully native terminal with no MeshCentral dependency, configurable global and per-agent shell defaults, on-the-fly shell switching, and run-as system/user support. See details and screenshots at the bottom. A short video demo is available here: https://youtu.be/ZZfnmpldL4Q
• The agent recovery functions now perform a complete unattended reinstall/recovery, which is especially helpful in cases where an agent has been removed due to Antivirus false positives.
• Added rate limiting protection for login endpoints to help prevent brute-force attacks; see the documentation for configuration details, troubleshooting, and monitoring current rate limit status.
• Fixed a bug in the registry editor where large registry entries could fail to load or display correctly.
• #2440 Fixed an issue preventing the agent from installing on Apple M5 Macs.
• Fixed the Send Command "Live Stream" mode so commands run as the selected user (when "Run As User" is enabled) instead of running as SYSTEM.
• "Run as User" on Windows now uses the user’s elevated admin context when available, so commands, scripts, and terminal sessions no longer run with the user’s limited permissions even if they are a local administrator.
• Fixed several underlying issues in the Alerts Manager, including a case where tasks configured to run on check failure would not execute.
• #2388 #2478 Fixed a regression from the previous release where the agent hostname was missing from the subject of resolved alert emails.
• Windows Update schedules now install manually approved patches even when auto-approval is disabled.
• Updated the bundled portable Python on Windows to version 3.14.5
• Added search to the Manual Agent Update dialog to quickly filter the agent list.
• Fixed several edge cases affecting Linux agent installation.
• MeshCentral has been updated to 1.2.0, which includes a database migration to improve event cleanup performance on large databases. Note: on installations with a large event history, MeshCentral may be unresponsive for a while (we have seen this take 4 hours in some cases) after the update while this migration runs in the background. This is expected, allow it time to finish. Take Control and File Browser will not work while the migration is in progress. You might also need to manually add an index if the issue doesn't resolve on its own, see https://github.com/amidaware/tacticalrmm/discussions/2495 for instructions.
• Various dependency updates.

Native Terminal

This release introduces a fully native terminal, built entirely on the Tactical RMM agent and web interface. It does not depend on MeshCentral. This is the first of the three MeshCentral-backed features (terminal, file browser, remote desktop) to be reimplemented natively, with the other two to follow in future releases.

Global shell defaults can now be configured under Global Settings > General, applied to all agents:

• Windows: CMD, PowerShell, or a custom shell specified by full path (e.g. C:\Program Files\PowerShell\7\pwsh.exe)
• Linux: Bash or a custom shell (e.g. /usr/bin/fish)
• macOS: bash or a custom shell (e.g. /bin/zsh)

Individual agents inherit the global default but can be overridden under the agent's edit settings, allowing a different shell per agent:

Within an active session, the shell can be switched between CMD, PowerShell, and Custo