Release / Development

Proxmox VE 9.0 released: Debian 13 base, kernel 6.14

PVE 9.0; based on Debian 13 “Trixie”, includes QEMU 10.0, LXC 6.0 and Ceph Squid 19.2. Upgrade path from 8→9 is officially supported.

Platform

Proxmox VE

Version

PVE 9 / Trixie tabanlı

Published

05 August 2025

Views

Highlights

Debian 13 “Trixie” base, Linux 6.14 kernel
QEMU 10.0, LXC 6.0, ZFS 2.3.x
Ceph Squid 19.2 support
Improvements in the SDN stack and a new mobile-friendly web interface
In-place upgrade from PVE 8 is officially supported (in-place upgrade) (pve8to9 check tool)

Migration Plan

Before starting upgrades on production clusters, outputs of pve8to9 --full will be archived; the first pilot host is scheduled in the September maintenance window.

Proxmox VE — Related Advisories

VIEW ALL →

Proxmox VE 20 Jul 2026

Vulnerability

Proxmox Virtual Environment - Security Advisories

Proxmox VE 17 Jul 2026

Medium · 6.1

CVE-2026-51081 — A cross-site scripting (XSS) vulnerability in Proxmox Virtual Environment (PVE) 9.x 5.1.8 and Proxmox Virtual Environmen

A cross-site scripting (XSS) vulnerability in Proxmox Virtual Environment (PVE) 9.x 5.1.8 and Proxmox Virtual Environment (PVE) 8.x 4.3.16 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload.

CVE-2026-51081 Vulnerability 1

Proxmox VE 17 Jul 2026

High · 7.2

CVE-2026-51082 — A race condition between the vncproxy and vncwebsocket API calls in Proxmox Virtual Environment (PVE) 9.x pve-manager be

A race condition between the vncproxy and vncwebsocket API calls in Proxmox Virtual Environment (PVE) 9.x pve-manager before 9.1.9 and 8.x before 8.4.19; qemu-server 9.x before 9.1.7 and 8.x before 8.4.7; and pve-container before 6.1.3 (PVE 9.x) and before 5.3.4 (PVE 8.x) allows an attacker with privileges to call "vncproxy" to hijack a VNC session that is established in parallel by a different user for a different VM.

CVE-2026-51082 Vulnerability 1