Keycloak 26.5.1 released

January 14 2026

To download the release go to Keycloak downloads.

Upgrading

Before upgrading refer to the migration guide for a complete list of changes.

#44863 x-robots HTTP header missing for static Keycloak resources, and REST endpoint responses
#45009 Performance improvement: Missing indexes on BROKER_LINK table columns
#45182 Allow full managing of realms from master realm without global admin role

#43975 Test Framework -> Embedded server -> Maven execution failure: Failed to read script file from: scripts/default-policy.js test-framework
#44371 403 Forbidden when assigning realm-management client roles despite FGAP disabled (regression in 26.4.0+) admin/fine-grained-permissions
#44417 Security issue with Organization feature exposes and fills the account name automatically in user/password form organizations
#44783 Create Realm button is missing when user has create-realm role admin/ui
#44860 Admin UI: slow response time listing second user page admin/ui
#45003 Bug in JWTClientAuthenticator and JWTClientSecretAuthenticator causes NPE authentication
#45093 Enable visibility of Role Mapping tab for users with view-users role admin/ui
#45107 Failed upgrade to 26.4.7 - sql generated for manual database upgrade contains invalid statements storage
#45116 Realm-level admininistrators can no longer use Admin Console since 26.3.0 (UI fails to render) admin/ui
#45185 ExternalLinkTest fails due to missing _adding_context_for_log_messages anchor docs
#45226 Failure when decrypting SAML Response since 26.5.0 saml
#45239 Upgrade to 26.5.0 failing due to FK_ORG_INVITATION_ORG constraint organizations
#45257 Creating IdentityProvider with latest java admin-client may fail against Keycloak server 26.4 or older admin/client-java
#45307 UI Bug: WebAuthn passkey list is broken in keycloak v2 theme login/ui