Kali Linux 2026.1 is the first update of the year for this Debian-based distribution designed for advanced penetration testing and security auditing, following December’s 2025.4 release. It features a new annual theme, a BackTrack-inspired desktop mode, updated tools, and a kernel upgrade.
As with previous .1 releases, the distribution receives a yearly visual refresh. The updated theme is applied system-wide, including the boot menu, installer, login screen, desktop, and wallpapers. The boot animation now loops correctly on live images, resolving the earlier issue where it could remain stuck at the initial frame.
A new “BackTrack mode” is now available in Kali Undercover. This mode replicates the appearance of BackTrack 5, including its wallpaper, color scheme, and window styling. It can be enabled from the menu or by running kali-undercover --backtrack, and toggled off in the same way.
Kali Linux 2026.1 includes eight new tools added to the repositories:
- AdaptixC2, a post-exploitation and adversarial emulation framework
- Atomic-Operator, for running Atomic Red Team tests across environments
- Fluxion, a tool for security auditing and social engineering research
- GEF, an enhanced debugging environment for GDB
- MetasploitMCP, an MCP server for Metasploit
- SSTImap, for detecting server-side template injection issues
- WPProbe, for enumerating WordPress plugins
- XSStrike, an XSS scanning tool
On top of that, the release adds 25 new packages, removes 9, and updates 183 existing packages. The kernel is upgraded to version 6.18.
A known issue affects the kali-tools-sdr metapackage. Several GNU Radio-related tools, including gr-air-modes and gqrx-sdr, are currently not functioning as expected. According to devs, this issue will be addressed in a future release.
Kali NetHunter receives several updates, including fixes for WPS scanning, HID permission handling, and navigation issues. Device-specific changes include a new Android 16 kernel for the Redmi Note 8 and improvements for the Samsung Galaxy S10 series, enabling internal wireless firmware to be used by tools such as Reaver, Bully, and Kismet.
Support for wireless injection on QCACLD 3.0 chipsets is now available through a new patch, expanding functionality to more Qualcomm-based devices.
For more information, see the announcement.
Kali Linux 2026.1 is available for download as new installation images. Existing users can upgrade by updating package sources and performing a full system upgrade with APT.
