Keycloak 26.2.2 released

April 30 2025

This post is more than one year old. The content within the blog post is likely to be out of date.

To download the release go to Keycloak downloads.

Upgrading

Before upgrading refer to the migration guide for a complete list of changes.

All resolved issues

Enhancements

#39142 Make distribution startup timeout configurable testsuite

Bugs

#39125 [Keycloak CI] - FIPS UT - Run crypto tests ci
#39349 CVE-2025-3910 Two factor authentication bypass
#39350 CVE-2025-3501 Keycloak hostname verification