Microsoft has refreshed its official Windows 11 Media Creation Tool to include the May 12, 2026 cumulative update, KB5089549. Anyone creating a bootable USB drive or ISO image using the tool as of today will receive installation media that already contains this Patch Tuesday release, eliminating the need to download and apply the update separately after a clean install of Windows 11 version 25H2.

The change, spotted first by eagle-eyed IT administrators and Windows enthusiasts, brings the installation files in line with the latest servicing stack and security hardening. Previously, the Media Creation Tool would fetch the base release of a feature update, forcing users to immediately run Windows Update after setup. Now, the integrated update saves time, bandwidth, and reduces the post-install vulnerability window.

KB5089549 itself is a typical cumulative update for Windows 11 25H2, addressing a mix of security flaws, reliability improvements, and non‑security bug fixes. Microsoft has published the changelog on its support site, highlighting patches for a remote code execution vulnerability in the Windows Kernel, a privilege escalation flaw in the Print Spooler service, and a mitigation for a speculative execution side‑channel attack variant. On the quality front, the update fixes an issue where memory leak in lsass.exe could degrade performance on domain controllers, resolves a deadlock that caused File Explorer to hang when navigating large network shares, and corrects a rendering artifact in the taskbar on multi‑monitor setups with different scaling factors.

The Media Creation Tool Refresh

The Media Creation Tool (MCT) is the primary method Microsoft offers for creating clean installation media. Unlike ISO files available through the Volume Licensing Service Center or the Visual Studio Subscriptions portal, the consumer‑facing MCT pulls the latest build directly from Microsoft’s servers, optionally including the most recent monthly quality update if the servicing team deems it mature enough. This conditional inclusion is meant to avoid shipping an update that might later be recalled or cause widespread boot failures—a lesson learned from past servicing incidents.

With KB5089549 now baked in, the Media Creation Tool delivers the following build information when you inspect the resulting media:

  • Edition: Windows 11 Pro / Home (multi‑edition)
  • Version: 25H2 (OS Build 26100.712)
  • Cumulative Update: KB5089549
  • Date: May 12, 2026

This means that anyone performing a clean installation will land directly on OS Build 26100.712, bypassing the initial 25H2 release build (26100.1) entirely. The installation experience itself remains unchanged—setup still offers the same personalisation options, Cortana voice prompts, and the ability to sign in with a Microsoft account or create a local account.

How to Create Fresh Install Media with KB5089549

Obtaining the updated media requires only a few steps:

  1. Navigate to the official Windows 11 download page on a working PC.
  2. Click the Download Now button under the “Create Windows 11 Installation Media” section.
  3. Run the MediaCreationTool_Win11_25H2.exe executable (administrator rights are required).
  4. Accept the license terms, then choose Create installation media for another PC.
  5. Select the language, edition, and architecture (64‑bit only).
  6. Choose USB flash drive or ISO file, then follow the prompts.

The tool will automatically fetch the correct files from Microsoft’s content delivery network. Because the cumulative update is about 650 MB larger than the base image, the download size is now approximately 6.8 GB for the ISO, compared to the previous 6.1 GB. The time to complete the download will vary by internet speed, but Microsoft has not changed the tool’s compression or validation logic.

IT professionals and system builders can also extract the install.wim or install.esd from the ISO and deploy it directly via Deployment Image Servicing and Management (DISM) or Microsoft Deployment Toolkit (MDT). The updated image is already in the servicing store, so DISM /Get-ImageInfo will show the correct build number and patch level.

Why This Matters for Users

For home users and enthusiasts, the immediate benefit is a faster path to a fully secured system. After a clean install, Windows Update would normally offer KB5089549 as a mandatory download, and on a typical 100 Mbps connection, downloading and installing it could add 10–15 minutes to the setup process. By integrating the update, that time drops to zero. This is particularly valuable when setting up multiple machines, doing a clean install on a gaming PC before a LAN party, or refreshing a device in a coffee shop with limited bandwidth.

Businesses and MSPs see additional advantages. When deploying dozens or hundreds of workstations, every minute saved per device compounds. Moreover, having a known‑good, up‑to‑date image reduces the risk of configuration drift: all systems start from an identical, patched baseline. It also helps with compliance, as security audits often check that the latest cumulative update is present before granting network access.

Another subtle but important improvement concerns driver compatibility. With KB5089549 installed from the outset, Windows is more likely to correctly detect and configure newer hardware—especially NVMe SSDs, Wi‑Fi 7 adapters, and Intel Thread Director optimisations—because the update’s inbox drivers are newer than those in the RTM image. This can prevent the infamous “missing drive” error during setup on some modern laptops.

Community and Early Adopter Reactions

Although there is no dedicated announcement from Microsoft, the change was quickly noticed on forums and social media. One enthusiast who created a USB drive on May 13 reported:

“Just rebuilt my workstation using the latest Media Creation Tool. Windows Update showed no pending patches after OOBE. Build 26100.712 is the new baseline.”

Some users expressed surprise that the tool now serves a build that is only one day old—typically Microsoft waits a week or two to ensure an update is stable before pushing it through the MCT. The consensus is that KB5089549 circulated in the Insider Beta channel for several weeks before its public release, giving Microsoft ample quality telemetry.

Not every experience has been flawless, however. A minority of users on Reddit and other forums flagged that the tool occasionally fails to recognise certain USB drives if they are formatted as exFAT; the workaround is to format the drive as NTFS or use Rufus for advanced partitioning. This behaviour is not new to this version, but it serves as a reminder to always test the media on one device before relying on it for a fleet deployment.

What the Integrated KB5089549 Does Not Include

It is important to note that the Media Creation Tool does not include:

  • Out‑of‑band emergency patches released after the monthly update. If a critical zero‑day is patched on May 15, the MCT will not be updated until the next scheduled refresh, which usually coincides with the next month’s Patch Tuesday or a point release.
  • Optional quality updates (the so‑called “C” and “D” week previews). These remain available only via Windows Update or the Microsoft Update Catalog.
  • Feature Experience Packs or Windows Feature Experience Packs that are distributed through the Microsoft Store. They still install during the first online moments of OOBE.
  • Third‑party drivers that hardware vendors provide through Windows Update. Those are fetched dynamically based on the detected hardware after the first boot.

Thus, while the integrated update tremendously reduces the update burden, a freshly installed system will still benefit from running Windows Update a few minutes after reaching the desktop to catch these additional components.

Known Issues

As of this refresh, Microsoft’s known‑issue list for KB5089549 includes only one non‑security item:

  • Autopilot device preparation might fail if the device name contains a leading zero. Affected users will see error code 0x80070002 during the enrolment phase. A workaround is to avoid leading zeros when naming the device or to apply a Group Policy that strips them.

No other widespread problems have been reported, and the update does not introduce any new hardware blocks or compatibility holds.

Looking Ahead

Integrating the latest cumulative update into the Media Creation Tool is not a permanent policy shift, but rather a best‑effort service. Microsoft typically refreshes the MCT once or twice per feature update lifecycle, often after a major point release or a significant security incident. With Windows 11 25H2 now approaching its first anniversary, this integration signals that the update stream is stable enough for wholesale adoption.

For those who have been holding off on upgrading from older Windows versions—particularly Windows 10, which exited extended support in October 2025—the availability of a fully patched installation medium removes one more barrier to migration. It also underscores Microsoft’s emphasis on automation and “zero‑touch” deployment experiences, aligning with the Sun Valley design principles that have guided Windows 11 since its inception.

Administrators and power users can monitor for future MCT refreshes by subscribing to the Windows release health dashboard or by periodically downloading the tool and checking the file properties. Meanwhile, the existing ISO or USB drive will continue to serve its purpose: a clean, secure, and up‑to‑date Windows 11 installation starts with a single download.