Mastodon 4.6.2 updates FFmpeg to fix critical CVE-2026-8461

What changed

Mastodon 4.6.2 was released on June 25, 2026. Per the changelog it updates the FFmpeg version in the container image to fix CVE-2026-8461, rated critical. The changelog gives no further details on the flaw.

What it means

Container image deployments with an affected FFmpeg were exposed to a critical vulnerability until updated.

Who is affected

Server admins running the Mastodon container image.

What to do by 25 Jun 2026

Upgrade to Mastodon 4.6.2 or later, or update FFmpeg in your own image.