# Keycloak 26.2.2 released

DevFeed: [Keycloak 26.2.2 released](<https://devfeed.tech/articles/keycloak-26-2-2-released-31698.md>)

Original publisher: [Read original article](<https://www.keycloak.org/2025/04/keycloak-2622-released>)

Author: Keycloak Team

Published: 2025-04-30T00:00:00Z

Content type: release

Language: en

Sources: [Keycloak Blog](<https://devfeed.tech/sources/keycloak-blog.md>)

Topics: [Keycloak](<https://devfeed.tech/topics/keycloak.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>), [ci](<https://devfeed.tech/topics/ci.md>), [migration](<https://devfeed.tech/topics/migration.md>)

Tags: [bugs](<https://devfeed.tech/tags/bugs.md>), [changes](<https://devfeed.tech/tags/changes.md>), [ci](<https://devfeed.tech/tags/ci.md>), [cve](<https://devfeed.tech/tags/cve.md>), [fips](<https://devfeed.tech/tags/fips.md>), [idm](<https://devfeed.tech/tags/idm.md>), [kerberos](<https://devfeed.tech/tags/kerberos.md>), [keycloak](<https://devfeed.tech/tags/keycloak.md>), [keycloak-release](<https://devfeed.tech/tags/keycloak-release.md>), [ldap](<https://devfeed.tech/tags/ldap.md>), [migration](<https://devfeed.tech/tags/migration.md>), [openid-connect](<https://devfeed.tech/tags/openid-connect.md>), [release](<https://devfeed.tech/tags/release.md>), [saml](<https://devfeed.tech/tags/saml.md>), [sso](<https://devfeed.tech/tags/sso.md>), [tests](<https://devfeed.tech/tags/tests.md>), [timeout](<https://devfeed.tech/tags/timeout.md>), [verification](<https://devfeed.tech/tags/verification.md>)

## AI overview

Keycloak 26.2.2 was released on April 30, 2025. The release includes a configurable distribution startup timeout, CI FIPS crypto tests, and fixes for a two-factor authentication bypass and hostname verification issues.

## Source excerpt

To download the release go to Keycloak downloads. Upgrading Before upgrading refer to the migration guide for a complete list of changes. All resolved issues Enhancements #39142 Make distribution startup timeout configurable testsuite Bugs #39125 [Keycloak CI] - FIPS UT - Run crypto tests ci #39349 CVE-2025-3910 Two factor authentication bypass #39350 CVE-2025-3501 Keycloak hostname verification