Keycloak 26.4.2 released

October 23 2025

To download the release go to Keycloak downloads.

Upgrading

Before upgrading refer to the migration guide for a complete list of changes.

All resolved issues

Enhancements

• #42991 Final review and update for UPDATE_EMAIL documentation docs
• #43351 Make pending email verification attribute removable by admin user-profile
• #43650 SPIFFE should support OIDC JWK endpoint

Bugs

• #26374 Workflow failure: Quarkus IT - FipsDistTest#testUnsupportedHttpsPkcs12KeyStoreInStrictMode ci
• #30939 Vulnerability in brute force detection settings authentication
• #43022 Incorrect Basic Auth encoding for OIDC IDentity Provider when Client ID contains colon identity-brokering
• #43191 Upgrade guide for 26.4.0 should mention new minimal PostgreSQL server version 13 requirement docs
• #43244 UI crash on admin `/users/add-user` since 26.4.0 admin/ui
• #43544 Intra-document links not rendered in downstream docs
• #43561 Server does not shutdown gracefully when started with --optimized core