# Keycloak 26.4.2 released

DevFeed: [Keycloak 26.4.2 released](<https://devfeed.tech/articles/keycloak-26-4-2-released-31728.md>)

Original publisher: [Read original article](<https://www.keycloak.org/2025/10/keycloak-2642-released>)

Author: Keycloak Team

Published: 2025-10-23T00:00:00Z

Content type: release

Language: en

Sources: [Keycloak Blog](<https://devfeed.tech/sources/keycloak-blog.md>)

Topics: [Keycloak](<https://devfeed.tech/topics/keycloak.md>), [upgrade](<https://devfeed.tech/topics/upgrade.md>), [version](<https://devfeed.tech/topics/version.md>), [OpenID connect (OIDC)](<https://devfeed.tech/topics/oidc.md>), [SPIFFE](<https://devfeed.tech/topics/spiffe.md>), [PostgreSQL](<https://devfeed.tech/topics/postgresql.md>)

Tags: [idm](<https://devfeed.tech/tags/idm.md>), [kerberos](<https://devfeed.tech/tags/kerberos.md>), [keycloak](<https://devfeed.tech/tags/keycloak.md>), [keycloak-release](<https://devfeed.tech/tags/keycloak-release.md>), [ldap](<https://devfeed.tech/tags/ldap.md>), [oidc](<https://devfeed.tech/tags/oidc.md>), [openid-connect](<https://devfeed.tech/tags/openid-connect.md>), [postgresql](<https://devfeed.tech/tags/postgresql.md>), [release](<https://devfeed.tech/tags/release.md>), [saml](<https://devfeed.tech/tags/saml.md>), [spiffe](<https://devfeed.tech/tags/spiffe.md>), [sso](<https://devfeed.tech/tags/sso.md>), [upgrade](<https://devfeed.tech/tags/upgrade.md>), [version](<https://devfeed.tech/tags/version.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>)

## AI overview

Keycloak 26.4.2 was released on October 23, 2025. The release includes documentation and user-profile enhancements, SPIFFE support for an OIDC JWK endpoint, and fixes for CI, authentication, identity brokering, admin UI, documentation links, and graceful server shutdown.

## Source excerpt

To download the release go to Keycloak downloads. Upgrading Before upgrading refer to the migration guide for a complete list of changes. All resolved issues Enhancements #42991 Final review and update for UPDATE_EMAIL documentation docs #43351 Make pending email verification attribute removable by admin user-profile #43650 SPIFFE should support OIDC JWK endpoint Bugs #26374 Workflow failure: Quarkus IT - FipsDistTest#testUnsupportedHttpsPkcs12KeyStoreInStrictMode ci #30939 Vulnerability in brute force detection settings authentication #43022 Incorrect Basic Auth encoding for OIDC IDentity Provider when Client ID contains colon identity-brokering #43191 Upgrade guide for 26.4.0 should mention new minimal PostgreSQL server version 13 requirement docs #43244 UI crash on admin `/users/add-user` since 26.4.0 admin/ui #43544 Intra-document links not rendered in downstream docs #43561 Server does not shutdown gracefully when started with --optimized core