We are happy to announce the release of ownCloud server 10.16.3.
Please note that this release contains Security and Bug fixes. We recommend that you update to this version as soon as possible.
Changelog
Security: Update phpseclib to 3.0.52 for CVE-2026-40194Security: Restrict AppConfigController read methods to full admins onlySecurity: Update symfony/routing to 5.4.52 for CVE-2026-45065Bugfix: Prevent mounting local storage if not allowedBugfix: Use the correct user ID when changing email via admin APIBugfix: Prevent IDOR in WebDAV comments API
More detailed information about this release is available in the Changelog on GitHub.
Download
Tarball and ZIP archives are available at:
- https://download.owncloud.com/server/stable/owncloud-10.16.3.tar.bz2
- https://download.owncloud.com/server/stable/owncloud-10.16.3.zip
Verification files (.md5, .sha256, .asc) are available alongside the archives:
A complete bundle (including all apps) is also available:
- https://download.owncloud.com/server/stable/owncloud-complete-20260522.tar.bz2
- https://download.owncloud.com/server/stable/owncloud-complete-20260522.zip
Docker Images
The official Docker image is available on Docker Hub:
docker pull owncloud/server:10.16.3
The following convenience tags have been restored and now point to 10.16.3:
docker pull owncloud/server:10
docker pull owncloud/server:10.16
docker pull owncloud/server:latest
Links
- GitHub: Release v10.16.3 · owncloud/core · GitHub
- Docker Hub: owncloud/server - Docker Image