Sloth Clash

Sloth ClashClash Meta (Mihomo) desktop client — Windows · macOS · Linux

🦥 latest: v0.8.1 · 29 Jul 2026

Downloads

🪟 Windows

Installer (x64) Installer (ARM64)

🍎 macOS

Apple Silicon (.dmg) Intel (.dmg)

🐧 Linux x64

AppImage .deb .rpm Arch package tar.gz

🐧 Linux ARM64

AppImage .deb .rpm Arch package tar.gz

Verify downloads against SHA256SUMS (minisign-signed: .minisig).

Install via package manager (auto-updates)

Debian / Ubuntu

curl -fsSL https://nemu-x.github.io/SlothClash/apt/key.gpg | sudo tee /usr/share/keyrings/slothclash.gpg >/dev/null
echo "deb [signed-by=/usr/share/keyrings/slothclash.gpg] https://nemu-x.github.io/SlothClash/apt ./" | sudo tee /etc/apt/sources.list.d/slothclash.list
sudo apt update && sudo apt install sloth-clash

Fedora / openSUSE

sudo dnf config-manager --add-repo https://nemu-x.github.io/SlothClash/rpm/slothclash.repo
sudo dnf install sloth-clash

Arch Linux (AUR)

yay -S sloth-clash-bin      # or: paru -S sloth-clash-bin

Or a one-off install without an AUR helper: sudo pacman -U https://github.com/Nemu-x/SlothClash/releases/latest/download/sloth-clash-linux-amd64.pkg.tar.zst

Releases

🦥 SlothClash v0.8.129 Jul 2026

> ⚠️ After updating you'll be asked once to reinstall the helper service (requires helper service 2.4.2+, which powers the TUN recovery below). Click the banner, accept the UAC prompt — it won't come back.

🛠️ TUN "Access was denied creating the TUN adapter" — fixed for good

A force-killed core (an in-app update, a crash, Task-Manager) never deleted its wintun adapter, and the leftover registered adapter made every later connect fail with *"access is denied"* — a state that survived both a reboot and a service reinstall, because a registered network device is untouched by either. Now:

  • 🧹 The privileged service can force-remove a stale wintun adapter (new DELETE /tun/remove) — the one thing the unprivileged app could never do itself.
  • 🔁 On a failed connect with that signature, the app removes the leftover adapter and retries automatically — no more manual Device Manager surgery.
  • 🚀 After an unclean previous exit, any leftover adapter is cleared at startup, before the first connect.
  • 🏷️ The Windows TUN adapter now has a stable name (SlothClash) instead of the generic Meta, so a fresh adapter never collides with a stale one or a co-installed Clash client. A subscription- or user-set device name still wins; macOS/Linux are unchanged.

✅ Rules — enable/disable individual rules from the dashboard

  • A checkbox on every row in the Rules table. Turn a rule off and it applies live (no manual reconnect) and stays listed so you can turn it back on.
  • Works for both subscription rules and your own custom ones. A rule-set toggles as a whole.

🌐 Proxies — reveal hidden groups

  • Proxy groups the subscription marks as hidden are collapsed by default. A "Show hidden" toggle in the Proxies header reveals them (badged), and only appears when there's something to reveal.

🔒 Security & dependencies

  • Production dependency audit is now clean — patched/removed the flagged packages (js-yaml, dompurify; dropped an unused react-router) and refreshed dependencies within their version ranges.

What's Changed

Full Changelog: https://github.com/Nemu-x/SlothClash/compare/v0.8.0...v0.8.1

🦥 SlothClash 0.8.019 Jul 2026

> ⚠️ After updating you will be asked once to reinstall the helper service. This release moves the service binary out of a temporary folder into an admin-only location next to the app — a security fix (below). Click the button on the banner, accept the UAC prompt, and it won't come back.

🔒 Security

The helper service no longer runs from a temporary folder. The privileged service — which runs as SYSTEM on Windows and root on macOS/Linux — was registered from a per-user temp directory. A non-admin user could replace that binary while the service was stopped and get code execution as SYSTEM.

It is now copied into an admin-only location and registered against *that* path:

| Platform | Location |

|---|---|

| Windows | %ProgramFiles%\Nemu-x\Sloth Clash\service |

| Linux | /usr/local/lib/sloth-clash |

| macOS | /Library/PrivilegedHelperTools (already correct) |

Requires helper service 2.4.0+. The installer also re-pins the service in place during an upgrade, and both "reinstall service" conditions now surface an actionable banner instead of a raw error.

✨ New

  • Operator branding. Providers can brand the app through HTTP response headers on the subscription (X-Brand-Desktop-*): name, logo, accent colour, greeting and links. A button in the Home header opens an operator dialog showing subscription traffic and expiry, device slots, provider links, and a one-click "copy info for support" block. Providers can also hide non-critical UI — Global mode, Proxy mode, local configs, Advanced. Full protocol: wiki → Branding.
  • Custom accent colour. Pick any colour by hex in Settings → Appearance. A contrast guard keeps it readable in both themes, and your choice always wins over a provider's.

🐞 Fixed

  • The Connection settings actually work now. *Allow LAN binding*, *Enable IPv6 DNS* and *Smart DNS fallback* were inert placeholders. They now drive allow-lan (rewriting a loopback bind-address so LAN access really works), dns.ipv6 and dns.respect-rules.
  • IPv6 resolution under TUN. Fake-IP mode ran with IPv6 enabled but no IPv6 fake-IP pool, so AAAA lookups never resolved. Added fake-ip-range6 to both config paths.
  • Suspend/resume detection. The resume check compared monotonic time, which doesn't advance while the machine sleeps — so the post-wake TUN repair never ran ("closed the lid, opened it, no internet"). It now measures the wall clock.
  • Interface scale. Below 100% the UI no longer leaves an empty band at the bottom; above 100% it no longer overflows the window.
  • UI polish. The status banner is dismissable and auto-retires instead of hanging forever and raising a false warning badge on Home. *Update available* is now a labelled accent pill. The helper service version is always visible in Settings → Info.

🔧 Core

Mihomo v1.19.29 · Helper service 2.4.1

Full changelog: https://github.com/Nemu-x/SlothClash/compare/v0.7.0...v0.8.0

What's Changed

Full Changelog: https://github.com/Nemu-x/SlothClash/compare/v0.7.0...v0.8.0

🦥 SlothClash v0.7.014 Jul 2026

A big release: first-class Linux support, a major security hardening of the helper service, encrypted subscriptions, and a lot of connectivity & stability work.

🔒 Security

  • Helper-service hardening (privilege-escalation fix). The embedded core is now pinned by SHA‑256 and verified by the system service before launch, closing a local privilege-escalation vector.
  • Service version handshake. The app now detects an outdated helper service and shows an in-app banner prompting you to update it, so the GUI and service never drift out of sync.
  • Go toolchain 1.26.5 — picks up the upstream crypto/tls ECH fix (GO‑2026‑5856).

🐧 Linux (new!)

  • Native AppImage, .deb, .rpm, and Arch packages for amd64 and arm64.
  • apt / dnf repositories and an AUR package (yay -S sloth-clash-bin) for one-command install with auto-updates.
  • New downloads landing page with an auto-updating release feed.

✨ Added

  • Encrypted subscriptions — per-profile age-encrypted subscription support (key generation + decrypt-at-fetch), a mihomo capability few clients expose.
  • Exit node per connection — the Connections screen now shows the exit node (with the full proxy chain on hover) and a country flag.
  • Auto-connect on startup (opt-in) and proper handling of the *Start minimized* preference on autostart.
  • Telegram group link in Settings.
  • Companion LAN controller (preview) — discover, pair, and control agents on your LAN (early groundwork for a TV remote).

🛠 Changed / Reliability

  • DNS defaults aligned with the upstream baseline — respect-rules off, IPv6 in DNS follows the top-level ipv6 flag, and a plain-UDP resolver is included so DNS keeps working on networks that block DoH/DoT. Fewer "node pings but doesn't load" cases.
  • TUN bring-up is now verified, with an automatic restart fallback and clearer failure diagnostics; recovery paths re-verify the adapter after resume.
  • Panic-guarded background workers and a top-level error boundary — a UI or worker fault no longer takes the app down; your connection keeps running.
  • mieru: UDP relay is on by default and transport is decoupled from wire protocol (fixes Discord voice on mieru nodes).
  • Core updated to mihomo v1.19.28 (adds REMATCH-NAME rule type).

🐞 Fixed

  • Fixed a WebView2 out-of-memory crash caused by an infinite invalidation loop on the Settings screen.
  • Rules no longer emit an empty middle field (MATCH,,DIRECT → MATCH,DIRECT).
  • Debug log now rotates instead of growing without bound.
  • Service uninstall cleanup, orphaned-core reconciliation, and fake-ip-filter defaults.
  • Deep-link consent prompt + SSRF guard on subscription import.

🌍 Localization

  • Additional English / Russian / Chinese translations (diagnostics, profile actions, settings).

What's Changed

Full Changelog: https://github.com/Nemu-x/SlothClash/compare/v0.6.2...v0.7.0

🦥 SlothClash v0.6.216 Jun 2026

A focused maintenance release addressing a critical TUN routing issue that could prevent all proxied traffic from working on certain subscription configurations.

---

🛠️ Fixes

🌐 TUN Connectivity & Routing

Fixed an issue where TUN mode could fail to pass any proxied traffic, causing:

  • Proxy nodes to appear unavailable
  • DNS resolution through proxies to fail
  • Only DIRECT connections to work correctly

#### Root Cause

Some subscriptions shipped with:

```yaml

strict-route: true

```

This setting could unintentionally force the core's own DNS requests and outbound proxy connections back into the TUN interface, creating routing loops and breaking connectivity.

#### Resolution

SlothClash now hardens the generated TUN configuration regardless of subscription-provided settings:

  • stack: gvisor
  • strict-route: false
  • auto-route: true
  • auto-detect-interface: true
  • dns-hijack: any:53

These defaults are now enforced at the base configuration level, ensuring that subscription profiles cannot accidentally break TUN routing.

⚙️ Advanced Configuration

Users can still customize and override TUN behavior through:

Settings → TUN Configuration

for advanced or specialized network setups.

---

🧠 Core Stability

This release improves overall reliability by protecting critical networking behavior from conflicting subscription settings, resulting in more consistent TUN operation across providers and profiles.

What's Changed

Full Changelog: https://github.com/Nemu-x/SlothClash/compare/v0.6.1...v0.6.2

🦥 SlothClash v0.6.115 Jun 2026

Maintenance release focused on reliability, connectivity, editor fixes, and a smoother localized experience — plus a refreshed proxy-groups editor and full zh/ru localization.

🛠️ Fixes

🪟 Windows system proxy

  • Proxy mode now applies immediately. SlothClash notifies Windows after changing proxy mode, so the OS picks up the new state right away.
  • Previously, the app could look connected while traffic was not routed until a network change, reconnect, or restart.

🌐 DNS & TUN

  • DNS under TUN is fixed. The DNS listener now binds correctly, so name resolution works as expected in TUN mode.

📦 Profiles & imports

  • Local profiles now connect. Profiles without a subscription URL — local configs and pasted share-links — are handled correctly.
  • Share-link import is more accurate. SlothClash now correctly maps:
  • xhttp / h2 transport
  • packet encoding / xudp
  • IPv6 servers
  • Unsupported or invalid links are now reported clearly instead of being silently dropped.

⚡ Faster Connect

  • Removed a redundant startup config reload that previously re-pulled all rule and proxy providers.
  • Connect should now feel faster and avoid unnecessary provider refreshes.

✍️ Editor

  • Ctrl+F now works inside YAML editor modals. Focus no longer bounces out of the editor when searching.

✨ Improvements

🧯 Auto-recovery

  • Added automatic detection and restart for an unresponsive core on the Windows service path.
  • If the core stops responding, SlothClash will try to recover it automatically.

🌍 Localization

  • Added full Chinese and Russian localization across:
  • Settings
  • Advanced
  • profile editors

🧩 Proxy-groups editor

  • Redesigned the proxy-groups editor to match the rules editor.
  • The editing experience should now feel more consistent across configuration sections.

🧠 Core update

  • Updated mihomo core to v1.19.27.

🔗 Downloads & release maintenance

  • Added static, version-free download links for installer and release asset names.
  • Added SECURITY.md and security-posture documentation.

What's Changed

Full Changelog: https://github.com/Nemu-x/SlothClash/compare/v0.6.0...v0.6.1