# Keycloak 26.3.2 released

DevFeed: [Keycloak 26.3.2 released](<https://devfeed.tech/articles/keycloak-26-3-2-released-31716.md>)

Original publisher: [Read original article](<https://www.keycloak.org/2025/07/keycloak-2632-released>)

Author: Keycloak Team

Published: 2025-07-24T00:00:00Z

Content type: release

Language: en

Sources: [Keycloak Blog](<https://devfeed.tech/sources/keycloak-blog.md>)

Topics: [Keycloak](<https://devfeed.tech/topics/keycloak.md>), [OpenID connect (OIDC)](<https://devfeed.tech/topics/oidc.md>), [Databases](<https://devfeed.tech/topics/databases.md>), [Security](<https://devfeed.tech/topics/security.md>), [migration](<https://devfeed.tech/topics/migration.md>)

Tags: [clustering](<https://devfeed.tech/tags/clustering.md>), [dependencies](<https://devfeed.tech/tags/dependencies.md>), [idm](<https://devfeed.tech/tags/idm.md>), [kerberos](<https://devfeed.tech/tags/kerberos.md>), [keycloak](<https://devfeed.tech/tags/keycloak.md>), [keycloak-release](<https://devfeed.tech/tags/keycloak-release.md>), [ldap](<https://devfeed.tech/tags/ldap.md>), [logging](<https://devfeed.tech/tags/logging.md>), [mariadb](<https://devfeed.tech/tags/mariadb.md>), [migration](<https://devfeed.tech/tags/migration.md>), [oidc](<https://devfeed.tech/tags/oidc.md>), [openid-connect](<https://devfeed.tech/tags/openid-connect.md>), [postgresql](<https://devfeed.tech/tags/postgresql.md>), [release](<https://devfeed.tech/tags/release.md>), [saml](<https://devfeed.tech/tags/saml.md>), [sso](<https://devfeed.tech/tags/sso.md>), [upgrade](<https://devfeed.tech/tags/upgrade.md>), [version](<https://devfeed.tech/tags/version.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>)

## AI overview

Keycloak 26.3.2 was released on July 24, 2025. The release adds an OIDC identity-provider authentication option, improves clustering and client-session logging, upgrades dependencies, and lists resolved bugs and vulnerabilities.

## Source excerpt

To download the release go to Keycloak downloads. Upgrading Before upgrading refer to the migration guide for a complete list of changes. All resolved issues New features #40237 Add option "Requires short state parameter" to OIDC IDP authentication Enhancements #40970 Run clustering compatibility tests on release/x.y branches #41034 Improve logging for client sessions load #41257 Upgrade to Infinispan 15.0.18.Final infinispan Bugs #39091 Flaky test: org.keycloak.testsuite.cluster.JGroupsCertificateRotationClusterTest#testCoordinatorHasScheduleTask ci #39634 Update MariaDB connector to 3.5.3 dist/quarkus #39854 Flaky test: org.keycloak.testsuite.cluster.PermissionTicketInvalidationClusterTest#crudWithFailover ci #40553 Upgrade org.postgresql:postgresql to version 42.7.7 to address CVE-2025-49146 dependencies #40736 CVE-2025-49574 - Exposure of Resource to Wrong Sphere vulnerability in io.vertx:vertx-core dependencies #40782 Flaky test: org.keycloak.testsuite.cluster.RealmInvalidationClusterTest#crudWithFailover ci #40784 Default jdbc-ping cluster setup for distributed caches fails in Oracle infinispan #40977 Loglevel recorded from build phase dist/quarkus #40980 Can't update security-admin-console via admin UI with volatile sessions infinispan #40995 LDAP / ModelException: At least one condition should be provided to OR query core #41018 Flaky test: org.keycloak.testsuite.cluster.ClientInvalidationClusterTest#crudWithFailover ci #41038 FIPS errors in CI #41082 Multiple primary key defined when attempting to upgrade after 26.3.0 core #41103 Service Account users now showing in the User List admin/ui #41105 Unknown relation when removing realm role with --db-schema configured storage #41152 Docs use em-dashes instead of double dashes for SPI options in regular text docs #41204 UpdateTest CI failures ci #41370 [26.3] MariaDB connector dependency is not properly overriden dist/quarkus