Contao 4.6.12 is available. The update can be done via the Contao Manager or via Composer.

The bugfix release fixes an information disclosure through incorrect access control in the back end (see CVE-2018-20028).

Also see: Tickets | Version comparison | Change log