Download Latest Version Apache CloudStack 4.22.0.0 (LTS) source code.tar.gz (14.8 MB)
Email in envelope

Get an email when there's a new version of Apache CloudStack

Home / 4.20.1.0
Name Modified Size InfoDownloads / Week
Parent folder
Apache CloudStack 4.20.1.0 (LTS) source code.tar.gz 2025-05-30 14.2 MB
Apache CloudStack 4.20.1.0 (LTS) source code.zip 2025-05-30 25.3 MB
README.md 2025-05-30 1.2 kB
Totals: 3 Items   39.5 MB 1

Apache CloudStack 4.20 maintenance release

Release notes: https://docs.cloudstack.apache.org/en/4.20.1.0/releasenotes Installation docs: https://docs.cloudstack.apache.org/en/4.20.1.0/installguide Upgrade docs: https://docs.cloudstack.apache.org/en/4.20.1.0/upgrading Admin docs: https://docs.cloudstack.apache.org/en/4.20.1.0/adminguide API docs: https://cloudstack.apache.org/api/apidocs-4.20

This LTS release includes fixes for the following security issues:

  • CVE-2025-26521: CKS cluster in project exposes user API keys
  • CVE-2025-30675: Unauthorised template/ISO list access to the domain/resource admins
  • CVE-2025-47713: Domain Admin can reset Admin password in Root Domain
  • CVE-2025-47849: Insecure access of user's API/Secret Keys in the same domain
  • CVE-2025-22829: Unauthorised access to dedicated resources in Quota plugin

Advisory: https://cloudstack.apache.org/blog/cve-advisories-4.19.3.0-4.20.1.0

Source: README.md, updated 2025-05-30