Release Notes

MetaDefender Kiosk 4.8.0
27 January 2026 (Kiosk 4.8.0.5807)
New Features
Protection against BadUSB and malicious USB Devices	Kiosk now detects and blocks BadUSB, malicious devices, and other non–mass‑storage USB interfaces, helping protect against attacks that emulate keyboards, inject keystrokes, or create covert network connections. This enhancement strengthens device security by preventing unauthorized USB behavior before it can compromise the system.
Support Kiosk application upgrade	Kiosk now supports remotely upgrading Kiosk applications through direct Kiosk Console or via Central Management. Administrators can schedule upgrades, monitor progress, and roll back if needed, removing the need for manual on‑site updates.
Option to disable displaying the Welcome Screen	Administrators can now configure Kiosk to skip displaying the Welcome screen and go straight to the media detection prompt, streamlining the user flow in environments where the initial screen is unnecessary.
Support for RFID and AD Login via OPSWAT CM10	Kiosk now supports authentication through CM10, allowing users to sign in using both RFID cards and Active Directory credentials. This enhancement improves access‑control flexibility and supports environments that require integrated RFID and AD authentication flows.
Kiosk supports scheduled shutdown and startup	Kiosk now supports scheduled shutdown and startup of the device, enabling automated power management for deployments that require predefined power cycles.
Retrieve files from Onedrive and Sharepoint	Kiosk now supports retrieving files from OneDrive and SharePoint using Entra ID, allowing users to browse and select files directly in the Kiosk UI for file retrieval.
Kiosk OOBE supports activation and deployment engine offline [Kiosk Hardened Image]	Kiosk OOBE now supports offline activation for both Kiosk and Core licenses, enabling administrators to complete the full setup in air‑gapped environments. This enhancement ensures smoother deployment in highly restricted or isolated networks, and administrators can also update engines offline as part of the setup process.
Enhancement
Option to exclude original files from the manifest when a sanitized version exists	Kiosk provides a new option allows administrators to exclude original files from the manifest, ensuring only sanitized versions are shown to users. When enabled, original files are automatically blocked if a sanitized copy exists. This enhancement improves safety and streamlines access to sanitized files on USB devices.
Use specific user to copy files to network locations	Kiosk now supports using a specific domain account to copy files to network locations, providing more flexible access control while retaining fallback to the OS logged‑in user when needed.
Real‑time file counting during file selection and scanning	Kiosk now displays a real‑time counter during file‑counting phases, showing the number of files detected as scanning progresses. This improvement provides clearer feedback and prevents confusion when scanning large directories.
Show only enabled source options when copy or retrieve files	Kiosk now allows to display only the source options that are enabled and properly configured, hiding all unavailable options for a cleaner and more intuitive user interface.
Configure file-size calculation per workflow	Administrators can now configure file‑size calculation settings per workflow directly in the Kiosk UI, replacing the previous global‑only configuration and offering more flexibility across different workflows.
Retrieve remediated files of allowed files only	Kiosk introduces a new option to only retrieve remediated version of the allowed files. Preventing retrieving sanitized or DLP-processed files when the original files were blocked.
Last modified date for blocked files	Kiosk now displays the last modified date for blocked files, helping administrators identify whether a file was altered between scan sessions. The implementation ensures accurate timestamps, resolves earlier translation issues
Added total scanned file size to logs and reports	Kiosk now includes the total scanned file size in both the session log and the scan report, providing clearer visibility into the overall data volume processed during each scan.
Print layout enhancements and paper size support	The print layout for Kiosk reports has been improved in Kiosk 4.8.9, providing a cleaner and more readable output. Administrators can now configure different paper sizes for flexible printing options.
Media Detection Enhancements	Kiosk includes several enhancements to media detection, improving the speed, accuracy, and reliability of identifying across different media types. Deliver a smoother, more consistent user experience during the scanning process
Kiosk support Predictive AI engine	Kiosk confirms supporting the Predictive AI engine, enabling advanced file analysis and faster threat detection. This AI‑driven enhancement improves scanning accuracy and strengthens overall security.
Improved detection for VMDKs with multiple filesystems	Scanning for VMDK files with multiple filesystems has been improved to ensure all valid partitions are detected. The system now checks for inaccessible partitions and automatically switches to VHDX conversion when needed, preventing cases where only the UEFI partition was mounted.
Improved detection for Acronis TIBX backup files	Support for Acronis TIBX backups has been improved with more reliable mounting for both disk‑level and file‑level backups. Compatibility was enhanced across multiple Acronis versions, though numeric‑only filenames may still fail due to a known Acronis bug.
Update MetaDefender Drive engines from Kiosk UI	Kiosk now supports updating the MetaDefender Drive engine directly from the Kiosk UI using MyOPSWAT as the update source, providing a more flexible and streamlined update process.
USB Device information sent to My OPSWAT	Kiosk now sends full USB device information to My OPSWAT, improving visibility and reporting on USB usage across deployments.
Include new version of Paragon Linux File System for Windows (version 6.1.300)	Kiosk now includes an updated Paragon Linux File System for Windows (version 6.1.300), improving VHDX detection and mounting reliability
Bugs
Fixed issue with file transfer from mobile devices to MFT	Fixed an issue where file transfers from mobile devices (iOS and Android) to MFT via Kiosk would hang during scanning, causing sessions to stall and the UI to become unresponsive. The update ensures reliable detection and transfer of files from connected phones, preventing endless loading states and UI freezes.
Fixed issue with Kiosk 4.7.10 configuration reverting to OCMv7 defaults	Fixed an issue where the configurations on Kiosk 4.7.10 reverted to the OCMv7 default instead of retaining the configured value on Kiosk, ensuring the setting now synchronizes correctly across Guest and Employee workflows.
Fixed issue with Windows Services reverting to Manual Startup	Fixed an issue where certain Windows services were incorrectly changed from Automatic to Manual startup during Kiosk installation or upgrade.