Harvester v1.7.3 Release Notes

This release introduces several features, enhancements, and bug fixes that improve system quality and the overall user experience. The documentation is available at https://docs.harvesterhci.io/v1.7.

The Harvester team appreciates your contributions and looks forward to receiving feedback regarding this release.

Downloads

AMD64

Full ISO

:cd: https://releases.rancher.com/harvester/v1.7.3/harvester-v1.7.3-amd64.iso

:file_folder: https://releases.rancher.com/harvester/v1.7.3/harvester-v1.7.3-vmlinuz-amd64

:file_folder: https://releases.rancher.com/harvester/v1.7.3/harvester-v1.7.3-initrd-amd64

:file_folder: https://releases.rancher.com/harvester/v1.7.3/harvester-v1.7.3-rootfs-amd64.squashfs

:white_check_mark: https://releases.rancher.com/harvester/v1.7.3/harvester-v1.7.3-amd64.sha512

:memo: https://releases.rancher.com/harvester/v1.7.3/version.yaml

Net Install ISO

:cd: https://releases.rancher.com/harvester/v1.7.3/harvester-v1.7.3-amd64-net-install.iso

:memo: https://docs.harvesterhci.io/v1.7/install/net-install/

ARM64

:cd: https://releases.rancher.com/harvester/v1.7.3/harvester-v1.7.3-arm64.iso

:file_folder: https://releases.rancher.com/harvester/v1.7.3/harvester-v1.7.3-vmlinuz-arm64

:file_folder: https://releases.rancher.com/harvester/v1.7.3/harvester-v1.7.3-initrd-arm64

:file_folder: https://releases.rancher.com/harvester/v1.7.3/harvester-v1.7.3-rootfs-arm64.squashfs

:white_check_mark: https://releases.rancher.com/harvester/v1.7.3/harvester-v1.7.3-arm64.sha512

:memo: https://releases.rancher.com/harvester/v1.7.3/version-arm64.yaml

Installation

Harvester can be installed using the ISO image, a bootable USB drive, and PXE boot. A net install ISO image, which contains only the core OS components, is also now available. For more information, see the Installation section of the documentation.

[!IMPORTANT] Starting with v1.7.0, the installation process includes a mandatory step for configuring the login password for the default rancher user account.

Upgrade

Harvester only allows upgrades from supported versions. For more information about upgrade paths and procedures, see Upgrading Harvester.

[!IMPORTANT] In v1.7.2, the upgrade path was improved to ensure bonded network interfaces (such as mgmt-bo) retain their correct names after a reboot. The upgrade script now reads the unique permanent hardware address of each bonded NIC, preventing interface name shifting and potential network outages during cluster upgrades.

Security Fixes

This release addresses security vulnerabilities in the following underlying components:

• Operating system (SUSE Linux Micro): The BaseOS image was updated with the latest SUSE security patches for the Linux kernel, resolving several use-after-free vulnerabilities that could allow privilege escalation (#11209). For more information, see CVE-2026-53359, CVE-2026-43499, and CVE-2026-46242.

• etcd (RKE2): RKE2 was updated to include a patched etcd version that resolves a denial-of-service vulnerability in the etcd TLS listener (GHSA-6vch-q96h-7gc3). This vulnerability could exhaust server memory and render the control plane or cluster unavailable.

Bug Fixes

• [backport v1.7] [BUG] Failed image cannot be deleted due to finalizer lock when a successful upload exists #11219
• [backport v1.7] [BUG] /v1/harvester/kubeconfig rejects external Rancher global admins #11161
• [BUG] 1.7.2 still uses a broken whereabouts 0.9.2 #11103

Others

• [HOTFIX] Create HOTFIX for v1.7.2 issue [#11129] #11207

Component Versions

Component	Version
Longhorn	v1.10.2
KubeVirt	v1.6.6
CDI	v1.64.0
Kube-OVN	v1.14.10
Embedded Rancher	v2.13.3
RKE2	v1.34.10+rke2r1
SL Micro	6.1

Contributors

Thank you to all the contributors that made this release possible.

@albinsun @amartin120 @asettle @brandboat @forbesguthrie @innobead @irishgordo @jbrockmeyer @jillian-maroket @rebeccazzzz @Vicente-Cheng @wheatdog