Keycloak end of life: end of support by version

CNCF / Red Hat · Servers & Databases

For Keycloak by CNCF / Red Hat, patchletter knows 12 support cycles. 11 of them have already ended and receive no more security updates. The current version of Keycloak is 26.8.2. The cycles come from the open endoflife.date project, last reconciled on 07/11/2026.

When does support end for which Keycloak version?

A cycle is a maintained version line. Where a date is given, support ends on that day. After it the vendor ships no more security updates for that line.

CycleLatest versionEnd of supportStatus
26.826.8.2no date on recordsupported
26.726.7.538 days agoEnd of Life
26.626.6.4122 days agoEnd of Life
26.526.5.7214 days agoEnd of Life
26.426.4.7306 days agoEnd of Life
26.326.3.5404 days agoEnd of Life
26.226.2.5494 days agoEnd of Life
26.126.1.5576 days agoEnd of Life
26.026.0.8662 days agoEnd of Life
25.025.0.6765 days agoEnd of Life
24.024.0.5881 days agoEnd of Life
23.023.0.7979 days agoEnd of Life

Which Keycloak versions no longer receive security updates?

11 of 12 cycles have ended. If you run one of those lines, the vendor ships you no more patches, not even for critical flaws.

  • Keycloak 26.726.7.5
  • Keycloak 26.626.6.4
  • Keycloak 26.526.5.7
  • Keycloak 26.426.4.7
  • Keycloak 26.326.3.5
  • Keycloak 26.226.2.5
  • Keycloak 26.126.1.5
  • Keycloak 26.026.0.8
  • Keycloak 25.025.0.6
  • Keycloak 24.024.0.5
  • Keycloak 23.023.0.7

Where does the EOL data for Keycloak come from?

From the open endoflife.date project, which collects vendors' official support commitments. patchletter reconciles the cycles daily; the Keycloak data is as of 07/11/2026. In case of doubt the vendor's own lifecycle page applies. patchletter deliberately stores no vendor full texts.

New Keycloak versions by email

Tick the product and patchletter reports new releases by email. The update email costs nothing, and one click stops it again. The warning 90, 30 and 7 days before support ends is part of patchletter Pro.