Keycloak 26.3.4 released

September 12 2025

To download the release go to Keycloak downloads.

Upgrading

Before upgrading refer to the migration guide for a complete list of changes.

#35825 Per client session idle time capped by realm level client idle timeout core
#40374 Random but frequent duplicate key value violates unique constraint \"constraint_offl_us_ses_pk2\" errors authentication
#40463 Login to Account Console produces two consecutive LOGIN events account/ui
#40857 Unbounded login_hint Parameter Can Corrupt KC_RESTART Cookie and Break Login Flow oidc
#41427 Parallel token exchange fails if client session is expired token-exchange
#41801 Lack of coordination in database creation in 26.3.0 causes deployment failures (Reopen) core
#41942 Uncaught server error: org.keycloak.models.ModelException: Database operation failed : Sync LDAP Groups to Keycloak (Custom Provider) core
#42012 Client session timestamp not updated in the database if running multiple nodes infinispan
#42046 KeycloakRealmImport placeholder replacement provides access to sensitive environment variables. operator
#42158 Bug in configuration keycoak via keycloak.conf dist/quarkus
#42164 [Keycloak CI - Docs] Broken links core
#42178 Integer validation error not shown for user profile fields user-profile
#42182 Validation errors for required actions don't show translated messages admin/ui
#42270 Missing double-dash in the events documentation core
#42339 Allowed Client Scopes add openid scope in scope list oidc
#42369 Missing client session offline settings on realm level in the admin UI admin/ui