diff --git a/stack/docker-compose-refarch-base.yml b/stack/docker-compose-refarch-base.yml
index 1dbb07d1..1d284d6f 100644
--- a/stack/docker-compose-refarch-base.yml
+++ b/stack/docker-compose-refarch-base.yml
@@ -39,7 +39,7 @@ services:
 
   keycloak:
     container_name: keycloak
-    image: quay.io/keycloak/keycloak:20.0.5@sha256:054ef67eb7dae0129bbb9eb0e0797fd2392cd6d135094a6063ae7ff7773ef81f
+    image: quay.io/keycloak/keycloak:25.0.4@sha256:bf788a3b7fd737143f98d4cb514cb9599c896acee01a26b2117a10bd99e23e11
     command:
       - start-dev --http-relative-path /auth
     depends_on: