Devices / Self-hosted apps & servers / Mastodon Social network server

Mastodon Social network server releases

Name: Mastodon Social network server firmware
Author: Mastodon

critical fix

Mastodon Social network server is tracked under self-hosted apps & servers. Its latest version, 4.7.1, shipped on Sep 1, 2026.

Latest version: 4.7.1
Released: Sep 1, 2026
Category: Self-hosted apps & servers
Last checked: Sep 15, 2026

How to update Mastodon Social network server

Open update page ↗

Read the release notes first — self-hosted projects break config and schemas between versions more often than appliances do.
Docker: pull the new image tag and recreate the container (`docker compose pull && docker compose up -d`).
Package or bare metal: update through your distribution's package manager, or replace the binary from the releases page.
Back up the config and database directory first. For most projects a downgrade is not supported once the schema has migrated.

Always download firmware from the manufacturer or project itself. Firmwarely links out; it never hosts firmware.

What changed

Changelog Security Fix password authentication bypass in 2FA auth for LDAP/PAM/SSO accounts (GHSA-vx32-x96w-qq65) Fix Denial of Service when processing pathological JSON-LD activities (GHSA-vgm8-frgh-rh2v) Fix disabled staff accounts still having access to admin API (GHSA-62j4-hvj7-px3f) Fixes Fix …

Manufacturer release notes ↗

Version history

4.7.1

Sep 1, 2026

FAQ

What is the latest version of Mastodon Social network server?

Version 4.7.1, released Sep 1, 2026. This page is refreshed every 30 minutes from the manufacturer's release page.

How do I update Mastodon Social network server?

See the step-by-step above. Pull the new image or package and restart the service. Read the release notes and back up the data directory first; most projects can't downgrade once the database has migrated.

How does Firmwarely know when there's a new version?

Every 30 minutes we read the manufacturer's official release page for the Mastodon Social network server and record the version, date and changelog. Subscribers watching this device get one email a day when it changed.

Is this an official Mastodon page?

No. Firmwarely is independent. Project and product names belong to their owners; always install releases from the project's own source.