Keycloak 26.3.4 released

September 12 2025

This post is more than one year old. The content within the blog post is likely to be out of date.

To download the release go to Keycloak downloads.

Upgrading

Before upgrading refer to the migration guide for a complete list of changes.

#35825 Per client session idle time capped by realm level client idle timeout core
#40374 Random but frequent duplicate key value violates unique constraint \"constraint_offl_us_ses_pk2\" errors authentication
#40463 Login to Account Console produces two consecutive LOGIN events account/ui
#40857 Unbounded login_hint Parameter Can Corrupt KC_RESTART Cookie and Break Login Flow oidc
#41427 Parallel token exchange fails if client session is expired token-exchange
#41801 Lack of coordination in database creation in 26.3.0 causes deployment failures (Reopen) core
#41942 Uncaught server error: org.keycloak.models.ModelException: Database operation failed : Sync LDAP Groups to Keycloak (Custom Provider) core
#42012 Client session timestamp not updated in the database if running multiple nodes infinispan
#42046 KeycloakRealmImport placeholder replacement provides access to sensitive environment variables. operator
#42158 Bug in configuration keycoak via keycloak.conf dist/quarkus
#42164 [Keycloak CI - Docs] Broken links core
#42178 Integer validation error not shown for user profile fields user-profile
#42182 Validation errors for required actions don't show translated messages admin/ui
#42270 Missing double-dash in the events documentation core
#42339 Allowed Client Scopes add openid scope in scope list oidc
#42369 Missing client session offline settings on realm level in the admin UI admin/ui