Luanti 5.17.0

[Krock]

Luanti 5.17.0 has been released!

Blog post: https://blog.luanti.org/2026/08/21/5.17.0-released/

This release fixes security vulnerabilities affecting both the client and server. We advise everyone to upgrade immediately.

Highlights

• Basic gamepad support (in-game actions, not formspecs)
• Support for multi-track animations (glTF models)
• Formspec: Hypertext "hypertip" element
• Formspec: Alignment styles for label[], textarea[] and field[]
• Integrity test (not an enforced check) for builtin files
• Improved collision handling
• Several usability improvements
• Many bugfixes

Full changelog: https://docs.luanti.org/about/changelog/#5160--5170
Source code: https://github.com/luanti-org/luanti/tree/5.17.0

Downloads

Refer to the Assets section on the GitHub release page.

Which file do I need to download?

• Windows: EXE file (for 64-bit systems) or the portable builds named win64, win32
• MacOS: macos*_arm64 (Apple Silicon), macos*_x86_64 (Intel-based)
• Android: arm64-v8a (common), armabi-v7a (old devices), x86 or x86_64 (ChromeOS, budget)
• Linux: check for updates in your package manager or use Flatpak

For Windows: If you're using the self-extracting launcher for the first time, see how to copy your data.

Please note some downloads are not yet available at the time of writing.

[Sushi7270]

BRO IM REALLY HAPPY THAT WE HAVE SEPARATED ANIMATIONS AND NOT A TIMELINE ANIMATION!!!!!!!!!!!!!!!!!!!!!!!!!! THIS IS THE BEST THING I EVER SEEN

[TenPlus1]

Nice Nice Nice Nice Nice! thanks Devs :P

[j8810kkw]

Man that went fast!!!

I read the info on the Link for Download and it showed

Warning:

This release fixes critical security vulnerabilities affecting both the client and server. We advise everyone to upgrade immediately.

Curious about the security vulnerabilities in question if anyone knows what it is.

Still I'm glad I could try it on my devices.

[Blockhead]

https://github.com/luanti-org/luanti/security/

[rubenwardy]

https://blog.luanti.org/2026/08/21/5.17.0-released/

[ChrisZ]

Nice one! Will the visual effects update be part of the next release?

[Linuxdirk]

https://github.com/luanti-org/luanti/security/

I think that it is funny that a sentence like this exist: “a malicious mod can set a global setting”. Because ALL mods can set or modify global settings. It’s not a surprise that it can be done with malicious intend, it’s a surprise that this does not happen more often.

Here’s a minimal reproducible example how modders can get server administrator permissions without abusing the API or using bugs.

https://gts.0x7be.net/@dirk/statuses/01 ... YH0EEK479V

Just hide this deep enough in a mod’s code and you become admin on any server loading that mod.

Easiest solution: Make all global settings readonly.

[ShallowDweller]

great job! thanks for the update!

[j8810kkw]

https://github.com/luanti-org/luanti/security/

Thanks Blockhead!!!

Well, I'm excited how this would turn out for my modding.

Did a couple of gaming with the dev version of this.

[j8810kkw]

screenshot_1.png (14.75 KiB) Viewed 747 times

I found this part in the Luanti version and I'm kind of curious as to what this is. It's kind of cool seeing this in a loading screen.

[cx384]

I found this part in the Luanti version and I'm kind of curious as to what this is.

https://github.com/luanti-org/luanti/pull/17336

[ArceusI]

Might hold off, just in case something serious has broken on the Android end, it's better to ensure that people push it's limits and see if anything broke because of the update.

[Sheriff_U3]

screenshot_1.png
I found this part in the Luanti version and I'm kind of curious as to what this is. It's kind of cool seeing this in a loading screen.

That is one of my favorite features added in 5.17. Multi-track animations though are even better IMO from a mod/game developer standpoint.

[Wuzzy]

Better gamepad support is very nice, but it not ready to fully play most games with gamepads due to missing formspec support, which is not a minor thing. You currently still have awkwardly to switch to mouse+keyboard once a formspec opens, so it’s not practical. YET. For full formspec support, I think gamepads need at least to be able to "tab" through input fields, buttons etc., or move the mouse cursor (or both?) and be able to close formspecs again. For text input, an on-screen keyboard would be needed so you can input text with your gamepad alone. I would like to see this feature continued to its logical end. ;-)

I am very happy that the hypertext tooltips finally made it in. Took us over 1.5 years to complete it. (Lotsa thanks to kilbith/jp btw, without you it would not exist). This is more than just hypertext, you can also style the background via 9-slice image. Downside: It doesn’t work on item tooltips, only on areas and widgets.

I will make heavy use of the "unhidable" HUD feature in my games, so that vignette, spyglass overlay, splatters and other screen effects do not disappear anymore after pressing F1.

[yw05]

Better gamepad support is very nice, but it not ready to fully play most games with gamepads due to missing formspec support, which is not a minor thing. You currently still have awkwardly to switch to mouse+keyboard once a formspec opens, so it’s not practical. YET.

Hence "basic gamepad support".

The reason behind this is simply that implementing gamepad support for in-game actions involves less work than doing gamepad support for formspecs, and there is no reason to delay in-game gamepad support given that this can be effectively disabled by clearing all gamepad-related bindings (which can be done with a one-liner using sed).

For full formspec support, I think gamepads need at least to be able to "tab" through input fields, buttons etc., or move the mouse cursor (or both?) and be able to close formspecs again.

There is a WIP PR to add gamepad support for formspecs: https://github.com/luanti-org/luanti/pull/17341

For text input, an on-screen keyboard would be needed so you can input text with your gamepad alone.

Given the complexity of shipping a virtual keyboard/IME, this will not be part of the initial PR for gamepad support for formspecs. My personal opinion is that gamepad-based text input should be provided by the OS (not Luanti), but this is not fully discussed yet. (As said, the first step is to add gamepad support for formspec navigation.)

[Blockhead]

For text input, an on-screen keyboard would be needed so you can input text with your gamepad alone.

Given the complexity of shipping a virtual keyboard/IME, this will not be part of the initial PR for gamepad support for formspecs. My personal opinion is that gamepad-based text input should be provided by the OS (not Luanti), but this is not fully discussed yet. (As said, the first step is to add gamepad support for formspec navigation.)

We would all take it for granted that the OS provides in IME on Android, and this is what the text inputs have so far depended upon. That said, I have no idea what gamepad-native games on PC usually do because I don't own one.