diff --git a/src/keycloak/chart/Chart.yaml b/src/keycloak/chart/Chart.yaml
index 7269f5f3e..255a95d04 100644
--- a/src/keycloak/chart/Chart.yaml
+++ b/src/keycloak/chart/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v2
 name: keycloak
 # renovate: datasource=docker depName=quay.io/keycloak/keycloak versioning=semver
-version: 25.0.5
+version: 25.0.6
 description: Open Source Identity and Access Management For Modern Applications and Services
 keywords:
   - sso
diff --git a/src/keycloak/chart/values.yaml b/src/keycloak/chart/values.yaml
index 9a6f5de0d..0e1605ba8 100644
--- a/src/keycloak/chart/values.yaml
+++ b/src/keycloak/chart/values.yaml
@@ -2,7 +2,7 @@ image:
   # The Keycloak image repository
   repository: quay.io/keycloak/keycloak
   # Overrides the Keycloak image tag whose default is the chart appVersion
-  tag: "25.0.5"
+  tag: "25.0.6"
   # The Keycloak image pull policy
   pullPolicy: IfNotPresent
 
diff --git a/src/keycloak/common/zarf.yaml b/src/keycloak/common/zarf.yaml
index 4740b8a39..8838c6a40 100644
--- a/src/keycloak/common/zarf.yaml
+++ b/src/keycloak/common/zarf.yaml
@@ -10,7 +10,7 @@ components:
       - name: keycloak
         namespace: keycloak
         # renovate: datasource=docker depName=quay.io/keycloak/keycloak versioning=semver
-        version: 25.0.5
+        version: 25.0.6
         localPath: ../chart
     actions:
       onDeploy:
diff --git a/src/keycloak/values/registry1-values.yaml b/src/keycloak/values/registry1-values.yaml
index c94809ed6..49937ba3d 100644
--- a/src/keycloak/values/registry1-values.yaml
+++ b/src/keycloak/values/registry1-values.yaml
@@ -1,6 +1,6 @@
 image:
   repository: registry1.dso.mil/ironbank/opensource/keycloak/keycloak
-  tag: "25.0.5"
+  tag: "25.0.6"
 podSecurityContext:
   fsGroup: 2000
 securityContext:
diff --git a/src/keycloak/values/unicorn-values.yaml b/src/keycloak/values/unicorn-values.yaml
index d3c178aa2..544734319 100644
--- a/src/keycloak/values/unicorn-values.yaml
+++ b/src/keycloak/values/unicorn-values.yaml
@@ -2,4 +2,4 @@ podSecurityContext:
   fsGroup: 65532
 image:
   repository: cgr.dev/du-uds-defenseunicorns/keycloak
-  tag: "25.0.5"
+  tag: "25.0.6"
diff --git a/src/keycloak/values/upstream-values.yaml b/src/keycloak/values/upstream-values.yaml
index ac9fc21ce..58d5ae6c5 100644
--- a/src/keycloak/values/upstream-values.yaml
+++ b/src/keycloak/values/upstream-values.yaml
@@ -2,4 +2,4 @@ podSecurityContext:
   fsGroup: 1000
 image:
   repository: quay.io/keycloak/keycloak
-  tag: "25.0.5"
+  tag: "25.0.6"
diff --git a/src/keycloak/zarf.yaml b/src/keycloak/zarf.yaml
index 91c498e26..acf43864b 100644
--- a/src/keycloak/zarf.yaml
+++ b/src/keycloak/zarf.yaml
@@ -20,7 +20,7 @@ components:
         valuesFiles:
           - "values/upstream-values.yaml"
     images:
-      - quay.io/keycloak/keycloak:25.0.5
+      - quay.io/keycloak/keycloak:25.0.6
       - ghcr.io/defenseunicorns/uds/identity-config:0.6.3
 
   - name: keycloak
@@ -36,7 +36,7 @@ components:
         valuesFiles:
           - "values/registry1-values.yaml"
     images:
-      - registry1.dso.mil/ironbank/opensource/keycloak/keycloak:25.0.5
+      - registry1.dso.mil/ironbank/opensource/keycloak/keycloak:25.0.6
       - ghcr.io/defenseunicorns/uds/identity-config:0.6.3
 
   - name: keycloak
@@ -50,5 +50,5 @@ components:
         valuesFiles:
           - "values/unicorn-values.yaml"
     images:
-      - cgr.dev/du-uds-defenseunicorns/keycloak:25.0.5 # todo: switch to FIPS image
+      - cgr.dev/du-uds-defenseunicorns/keycloak:25.0.6 # todo: switch to FIPS image
       - ghcr.io/defenseunicorns/uds/identity-config:0.6.3