Keycloak Files

Identity and access management for modern applications and services

This is an exact mirror of the Keycloak project, hosted at https://github.com/keycloak/keycloak. SourceForge is not affiliated with Keycloak.

The interactive file manager requires Javascript. Please enable it or use sftp or scp.
You may still browse the files here.

Name	Modified	Size	InfoDownloads / Week
Parent folder
third-party-notice-keycloak.html	2026-08-05	7.3 MB	0
keycloak-documentation-26.7.1.zip	2026-08-05	27.8 MB	0
keycloak-documentation-26.7.1.zip.asc	2026-08-05	228 Bytes	0
keycloak-ui-shared-26.7.1.tgz	2026-08-05	86.0 kB	0
keycloak-admin-client-26.7.1.tgz	2026-08-05	78.6 kB	0
keycloak-admin-ui-26.7.1.tgz	2026-08-05	3.8 MB	0
keycloak-api-docs-26.7.1.zip	2026-08-05	139.0 kB	0
keycloak-api-docs-26.7.1.zip.asc	2026-08-05	228 Bytes	0
keycloak-26.7.1.tar.gz	2026-08-05	175.7 MB	0
keycloak-26.7.1.tar.gz.asc	2026-08-05	228 Bytes	0
keycloak-26.7.1.zip	2026-08-05	176.0 MB	0
keycloak-26.7.1.zip.asc	2026-08-05	228 Bytes	0
keycloak-account-ui-26.7.1.tgz	2026-08-05	788.9 kB	0
26.7.1 source code.tar.gz	2026-08-05	48.3 MB	0
26.7.1 source code.zip	2026-08-05	59.3 MB	2
README.md	2026-08-05	3.4 kB	0
Totals: 16 Items		499.2 MB	2

Upgrading

Before upgrading refer to the migration guide for a complete list of changes.

All resolved issues

Security fixes

#49429](https://github.com/href="https://github.com/keycloak/keycloak/issues/49429">/issues/49429) [CVE-2026-9793] JWE request object bypasses requestObjectSignatureAlg enforcement oidc
#50445](https://github.com/href="https://github.com/keycloak/keycloak/issues/50445">/issues/50445) [CVE-2026-4629] Privilege escalation via hardcoded role mapper injection in manage-clients admin/api
#50569](https://github.com/href="https://github.com/keycloak/keycloak/issues/50569">/issues/50569) [CVE-2026-14209] Keycloak Admin UI Extension `brute-force-user` User Disclosure via `search=id:` under FGAP v2 admin/fine-grained-permissions
#50615](https://github.com/href="https://github.com/keycloak/keycloak/issues/50615">/issues/50615) [CVE-2026-14614] Keycloak 26.6.3 Fine-Grained Admin Permissions Bypass in Client Scope Assignment admin/fine-grained-permissions
#50617](https://github.com/href="https://github.com/keycloak/keycloak/issues/50617">/issues/50617) [CVE-2026-14615] FGAP v2 parent group children endpoint bypasses per-child view permission filter admin/fine-grained-permissions

Bugs

#50719](https://github.com/href="https://github.com/keycloak/keycloak/issues/50719">/issues/50719) WebAuthn authenticator attachment policy is bypassed when the client omits the attachment field authentication/webauthn
#50750](https://github.com/href="https://github.com/keycloak/keycloak/issues/50750">/issues/50750) Clustering test broken in 26.7 release branch ci
#50836](https://github.com/href="https://github.com/keycloak/keycloak/issues/50836">/issues/50836) Kustomize cluster-wide faulty Role&RoleBinding operator
#50850](https://github.com/href="https://github.com/keycloak/keycloak/issues/50850">/issues/50850) New Password is commited when multiple Password Reset is detected authentication
#50882](https://github.com/href="https://github.com/keycloak/keycloak/issues/50882">/issues/50882) 500 when client requests `organization` scope with it already set to `Default` authentication
#50928](https://github.com/href="https://github.com/keycloak/keycloak/issues/50928">/issues/50928) IllegalFormatConversionException in LiquibaseDBLockProviderFactory and wrong time conversion core

Source: README.md, updated 2026-08-05

Other Useful Business Software

MongoDB Atlas runs apps anywhere Icon

MongoDB Atlas runs apps anywhere

Deploy in 115+ regions with the modern database for every enterprise.

MongoDB Atlas gives you the freedom to build and run modern applications anywhere—across AWS, Azure, and Google Cloud. With global availability in over 115 regions, Atlas lets you deploy close to your users, meet compliance needs, and scale with confidence across any geography.

Start Free

99.99% Uptime for MySQL and PostgreSQL Databases Icon

99.99% Uptime for MySQL and PostgreSQL Databases

Sub-second maintenance. 2x read/write performance. Built-in vector search for AI apps.

Cloud SQL Enterprise Plus delivers near-zero downtime with 35 days of point-in-time recovery. Supports MySQL, PostgreSQL, and SQL Server.

Try Free

Ship Agents Faster

Transform your applications and workflows into powerful agentic systems at global scale.

Gemini Enterprise Agent Platform lets you rapidly build, scale, govern and optimize production-ready agents grounded in your organization's data. The platform enables developers to build custom or pre-built agents for virtually any use case. New customers get $300 in free credits.

Get Started Free

Recommended Projects

Kanidm
Kanidm: A simple, secure, and fast identity management platform
Pocket ID
Easy-to-use OIDC provider that allows to authenticate with passkeys
VoidAuth
Single Sign-On for Your Self-Hosted Universe
hydra
Cloud native, security-first, API security for your infrastructure
Google Auth Library
Google Auth Library for Node.js