The Ory Changelog

Ory Network Ory Hydra Ory Kratos Ory Keto Ory Oathkeeper Ory Polis Ory Elements Ory Enterprise License

Ory Network, Ory Hydra, Ory Kratos, Ory Keto, Ory Oathkeeper, Ory Polis, Ory Elements v26.2.9 released

Ory Network Hide the "Sign up" link on the Account Experience login page Admins can now hide the "Sign up" link on the login card without disabling...

May 11, 2026

Ory Enterprise License

Ory Network, Ory Hydra, Ory Kratos, Ory Keto, Ory Oathkeeper, Ory Elements v26.2.8 released

Ory Network Hide Ory branding on qualifying plans Customers on the Growth and Enterprise plans can now hide the Ory badge on the Account Experience by...

April 29, 2026

Ory Enterprise License

Ory Kratos v26.2.7 released

Ory Kratos Add security.disallow_ref_in_identity_schemas to lock down schema loading Introduces an opt-in config flag,...

April 29, 2026

Ory Enterprise License

Ory Network, Ory Kratos v26.2.6 released

Ory Network Carry over upstream MFA to the Ory session Ory now trusts the authentication strength reported by upstream OpenID Connect providers. When a user...

April 29, 2026

Ory Enterprise License

Ory Network, Ory Hydra, Ory Kratos, Ory Keto, Ory Oathkeeper, Ory Elements v26.2.5 released

Ory Network, Ory Kratos, Ory Hydra, Ory Keto, Ory Oathkeeper Fix shared mutable state in error handling Error globals such as herodot.ErrNotFound were...

April 21, 2026

Ory Enterprise License

Ory Network, Ory Hydra, Ory Kratos, Ory Keto, Ory Oathkeeper, Ory Elements v26.2.4 released

Ory Network Add break-glass account recovery for organization identities Organization members can now be designated for break-glass account recovery. These...

April 15, 2026

Ory Enterprise License

Ory Network, Ory Kratos v26.2.2 released

Ory Network, Ory Kratos Phone number verification with SMS code You can now verify phone numbers through the standalone verification flow, not just as a side...

April 1, 2026

Ory Enterprise License

Ory Network, Ory Hydra, Ory Kratos v26.2.1 released

Ory Network Fix identity disabled error handling during self-service flows Previously, when attempting to recover or login as an identity that had been...

March 25, 2026

Ory Hydra Ory Kratos Ory Keto Ory Oathkeeper Ory Polis Ory Enterprise License

Security Advisory: Ory Kratos, Hydra, Keto, Oathkeeper, Polis v26.2.0

Ory Kratos SQL injection via forged pagination tokens (CVE-2026-33503, High) The ListCourierMessages Admin API is vulnerable to SQL injection through forged...

March 20, 2026

Ory Enterprise License

Ory Network, Ory Kratos, Ory Oathkeeper, Ory Elements v26.2.0 released

Ory Network Automatic account linking for Google and Apple providers You can now enable automatic account linking for Google and Apple social sign-in...

March 20, 2026