Keycloak 26.5.1 released
January 14 2026
To download the release go to Keycloak downloads.
Upgrading
Before upgrading refer to the migration guide for a complete list of changes.
All resolved issues
Enhancements
- #44863 x-robots HTTP header missing for static Keycloak resources, and REST endpoint responses
- #45009 Performance improvement: Missing indexes on BROKER_LINK table columns
- #45182 Allow full managing of realms from master realm without global admin role
Bugs
- #43975 Test Framework -> Embedded server -> Maven execution failure: Failed to read script file from: scripts/default-policy.js test-framework
- #44371 403 Forbidden when assigning realm-management client roles despite FGAP disabled (regression in 26.4.0+) admin/fine-grained-permissions
- #44417 Security issue with Organization feature exposes and fills the account name automatically in user/password form organizations
- #44783 Create Realm button is missing when user has create-realm role admin/ui
- #44860 Admin UI: slow response time listing second user page admin/ui
- #45003 Bug in JWTClientAuthenticator and JWTClientSecretAuthenticator causes NPE authentication
- #45093 Enable visibility of Role Mapping tab for users with view-users role admin/ui
- #45107 Failed upgrade to 26.4.7 - sql generated for manual database upgrade contains invalid statements storage
- #45116 Realm-level admininistrators can no longer use Admin Console since 26.3.0 (UI fails to render) admin/ui
- #45185 ExternalLinkTest fails due to missing _adding_context_for_log_messages anchor docs
- #45226 Failure when decrypting SAML Response since 26.5.0 saml
- #45239 Upgrade to 26.5.0 failing due to FK_ORG_INVITATION_ORG constraint organizations
- #45257 Creating IdentityProvider with latest java admin-client may fail against Keycloak server 26.4 or older admin/client-java
- #45307 UI Bug: WebAuthn passkey list is broken in keycloak v2 theme login/ui