Locally Uncensored / Blog / This Post
Release October 14, 2026 · 9 min read

v3.0.6: Talk to Your Model, Let It Use the Screen, and a Mac Build

Locally Uncensored 3.0.6 came out on October 11, 2026. You can talk to LU and hear it answer, and a model can use the mouse and keyboard in apps you approve. Local models with image input now download with their image part, a chat on LU Cloud can order images and clips, and the cloud lists ten more chat models. It is also the first release with a build for Macs with Apple Silicon.

Four of these are in beta: Voice, computer control, Create in chat and the ten new models. The app marks each of them with the word Beta, and hovering the mark says what that means. We list what we have not tested at the end of this post, and the list is long.

The short version:

Voice: Talk to LU and Hear It Answer

Voice is a new surface in the main navigation. The model that answers is the chat model you already picked, so there is no second model to choose. The first time, LU shows what it downloads and where it goes, then installs its own voice engine with one click. You can interrupt an answer by speaking, and the session is saved as a normal conversation.

There are fifteen voices: Alba, Anna, Azelma, Charles, Eponine, Eve, Fantine, George, Jane, Javert, Marius, Mary, Michael, Paul and Vera. Changing the voice fetches one small file and installs nothing else again.

Four switches sit next to the title: Voice settings, Agent, Where it may work and Thinking. You can move all of them while a session runs. With Agent off, the session is a conversation without tools. With Agent on, a voice session has the tools of the agent chat with the same permissions, and a tool that needs your approval waits for a click on Approve or Reject.

Where it may work decides how far those tools reach. Workspace only is the default: files stay inside the folder of the session, LU asks before every command, and there is no screen. Whole computer opens files by any path your user account can open, commands in any folder, and the screen. LU asks once before that level is used for the first time. System folders and the folders that hold keys and passwords stay closed at both levels.

Thinking is off by default, and a thought is never read aloud. While the voice engine is in memory, a switch next to the title shows how much memory it holds. On our Windows test machine that was about 1 GB. One click ends the session and stops the engine. Without the click, the engine shuts down five minutes after the last session.

What Voice does not do yet
Voice is English only, and the voices are fixed. It is shown in local mode only, because LU Cloud has no voice service yet. The first session after setup or a restart took 23 to 63 seconds to start in our Windows tests, against about one second for later ones. Our check in the real app ran on Windows. On a Mac, Voice has been tried by hand in the app. On Linux it has not been run in the app.

The Voice guide walks through setup, the four switches and the first session.

Computer Control: Off Until You Switch It On

With computer control, a model uses the mouse and keyboard in apps you approve. It is new and not proven in every app yet, so watch what it does and stop it when it goes wrong.

It stays off until you switch it on under Settings, Agent, Agent Permissions, Computer control. After that, LU still asks at several points:

Some places are always off limits: terminals, password managers, system sign-in and permission dialogs, security settings, the Run dialog and windows with administrator rights. LU never types into a password field.

Ctrl+Alt+Space pauses and Ctrl+Alt+Esc stops. In an autonomous session LU also pauses when you move the mouse, shows what it did so far, and asks whether you take over or let it continue. A screen task ends after at most 25 steps or 8 minutes.

On Windows the LU window shrinks to a small window in the top right corner while LU works, and the edge of that screen glows softly in purple. On Linux the window stays as it is and a bar at the top says "LU is controlling this computer".

You can also ask for something on the screen by voice. In our test on Windows, typing a note in Notepad by voice took 11 to 22 seconds from the end of the command to the spoken result, with a local 9B model. That was measured before the question in every new chat existed, so in a new chat your click on Allow comes on top.

Where computer control stands
There is no background mode: LU works in the foreground with the real pointer. The list of buttons and fields and the autonomous mode exist on Windows only. On Linux and macOS LU cannot name what a click would press, so every click there is asked as a sensitive action. On a Mac, computer control is in the app but not fully tested yet. On Linux it has not been run in the app and needs an X11 session. Text on the screen can try to give the model instructions. LU marks what it reads from the screen as untrusted and asks before sensitive actions. For anything that matters, stay in the supervised mode.

Local Models With Image Input Arrive Complete

A local chat model of the LU Engine takes pictures only when a second file, its image part, lies next to the model. Before 3.0.6 it was easy to end up with only the first file. LU now fetches both as one download on the Models page, in onboarding and for a model you find through the hub search, with one progress bar and a checksum for each file.

The download dialogs have a ticked box, Include image input, with the size it adds. For a model you already have, Add image input fetches the missing file: on the model's row under Models, and at the top of a chat once a picture is attached. The catalog lists 42 image parts. If the graphics memory has no room for the part next to the model, the model loads without it and LU says so.

An image part you placed by hand under its original name is now found too, as long as it is clear which model it belongs to.

Create in Chat (Beta)

In Cloud mode the Plugins menu has a Create switch. With it on, the chat model puts together an order from what you ask for. The order appears as a card, and nothing runs until you approve it. Read the order before you start it.

The switch appears once your account has it, because Create in chat is switched on account by account. It has not yet run in the installed app against the live service.

Ten More Chat Models on LU Cloud

The Cloud model picker opens with a new group of ten models, marked Uncensored (Beta). Their makers release them to answer without refusing. Among them are Gemma 4 Uncensored, GLM 4.7 Flash Heretic, Aion 3.5 and Abliterated Large V2. A model shows up once the cloud catalogue lists it.

Five of the ten say Limited capacity in grey after their names. At busy times such a model can ask you to wait a moment. All ten are new in LU Cloud and can still change.

One rename in the same area: the No refusals mark is now called No Filter. It keeps its meaning. Only a model that answered in full in our measurement carries it.

A Build for Macs With Apple Silicon (Beta)

3.0.6 is the first release with a Mac build. It needs Apple Silicon and macOS 14 or newer. Intel Macs are not supported.

On a Mac, chat runs on local models through the bundled server with Metal, and Create makes images and video on the Mac itself, without ComfyUI. On an M5 Pro with 48 GB, DreamShaper XL Turbo made an image in 33 seconds and Qwen-Image 2.1 Turbo in 38. LTX-2.3 Distilled 4-bit made a clip of two seconds at 768x512 with sound in 64 seconds.

It is a beta for a plain reason: the app has run on that one Mac only. It has not run on macOS 14 or 15, and not on a Mac with 16 or 24 GB. Remote Access and the automatic update are not confirmed on macOS. The Mac page keeps the current state.

Smaller Changes

Fixes Worth Knowing About

Security

A security review of everything new in this release led to ten fixes before shipping. No key press puts a character into a password field, and pasting is refused there as well. A double click on a program, an installer, a script or a shortcut asks first. Sensitive buttons are recognised in eleven more languages, and the question about an app starts with the focus on Deny.

With Whole computer, token files, mail and browser data and LU's own folders stay closed. The start files of the shell, such as .zshrc, .bashrc or the PowerShell profile, can be read and not changed, because a line written there is a command that runs later without a question. The agent can no longer fetch from a private network, and a page over 8 MB is refused.

What We Have Not Tested

The changelog has the full list. These are the points we think you should know before you rely on something:

Download

Each link loads the file directly.

New here? The handbook takes you from installer to first generation, and the install chapter explains the SmartScreen warning and how updates arrive.

Related

Locally Uncensored 3.0.6. AGPL-3.0 licensed. Built by PurpleDoubleD. Bug reports and feature requests on GitHub Issues or in the Discord.

In the handbook

Voice, computer control and a Mac build, with the limits written down

Download for Windows Download for Mac (Apple Silicon) Download for Linux

No GPU? LU Cloud runs in a browser, paid from credit packs that start at 15 EUR and need no subscription. See what it costs or open LU Cloud.