Microsoft’s October Home windows 11 updates have damaged the “localhost” performance, making purposes that join again to 127.0.0.1 over HTTP/2 now not operate correctly.
Localhost refers back to the native pc or system you are at present utilizing, which will be accessed by means of the particular IP tackle 127.0.0.1.
Builders generally use localhost to check web sites or debug purposes, however it can be used by purposes that want to hook up with a domestically operating service to carry out some motion or question.
After putting in the Home windows 11 KB5066835 Patch Tuesday, and even September’s KB5065789 preview replace, customers are discovering that their purposes are now not in a position to full HTTP connections to the localhost (127.0.0.1) IP tackle.
When trying to take action, they acquired errors like “ERR_CONNECTION_RESET” or “ERR_HTTP2_PROTOCOL_ERROR”.
These points have been reported by Home windows customers on the Microsoft boards, Stack Trade, and Reddit, all stating they’re now not in a position to make HTTP connections to 127.0.0.1.
The bug has impacted broadly used purposes, together with Visible Studio debugging, SSMS Entra ID authentication, and the Duo Desktop app, which verifies system safety posture and requires connections again to net servers operating on the localhost.
“After performing Home windows Updates for Home windows 11 24H2 and 25H2, chances are you’ll expertise a problem the place the Duo Immediate is unable to achieve Duo Desktop,” reads the Duo help bulletin.
“This will likely stop profitable authentication (or lead to restricted performance) in conditions the place the next are in use: Trusted Endpoints, Insurance policies such because the Duo Desktop & Gadget Well being coverage, Duo Desktop as an Authentication Technique. Duo Passport. Verified Duo Push with Bluetooth Autofill or Proximity Verification.”
BornCity suggests the next Registry entries assist resolve the issue by disabling the HTTP/2 protocol however BleepingComputer has not been in a position to independently affirm this repair.
[HKEY_LOCAL_MACHINESystemCurrentControlSetServicesHTTPParameters]
"EnableHttp2Tls"=dword:00000000
"EnableHttp2Cleartext"=dword:00000000
One other methodology that some declare resolved the issue was to put in the newest Microsoft Defender intelligence replace. Nevertheless, others report that it has not fastened the difficulty on their Home windows units.
As a substitute, the one certain strategy to resolve the bug has been to uninstall the October KB5066835 replace and September’s KB5065789 preview replace.
Home windows customers can uninstall the updates utilizing the next instructions:
wusa /uninstall /kb:5066835
wusa /uninstall /kb:5065789
After uninstalling the updates and restarting Home windows, the loopback interface ought to as soon as once more enable HTTP/2 connections, resolving the problems utilizing purposes.
BleepingComputer contacted Microsoft about this bug and can replace our story if we obtain a response.
46% of environments had passwords cracked, practically doubling from 25% final 12 months.
Get the Picus Blue Report 2025 now for a complete have a look at extra findings on prevention, detection, and information exfiltration tendencies.
