diff --git a/docker-compose.yml b/docker-compose.yml
index d74234e685d3cfb7173c8bcf16439e442c8a90b7..7c32a6aa7ba6e0cfa1cccb826a19d04f5e489d44 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -17,11 +17,10 @@ services:
       retries: 5
 
   keycloak:
-    image: crdm-keycloak:${KC_TAG:-latest}
+    image: crdm-keycloak:26.0
     build:
       context: ./keycloak
       args:
-        - KC_TAG=${KC_TAG:-latest}
         - KC_USER=${KC_USER:-1000}
     restart: "unless-stopped"
     environment:
diff --git a/keycloak/Dockerfile b/keycloak/Dockerfile
index e01b629427259cd38996c596c539bce740ede64b..f74f81782d7585ae066032bb351b82e5c7901f90 100644
--- a/keycloak/Dockerfile
+++ b/keycloak/Dockerfile
@@ -1,4 +1,3 @@
-ARG KC_TAG
 ARG KC_USER
 
 FROM registry.access.redhat.com/ubi9 AS ubi-micro-build
@@ -6,7 +5,7 @@ COPY ca-certificates/* /etc/pki/ca-trust/source/anchors/
 RUN update-ca-trust
 
 
-FROM quay.io/keycloak/keycloak:${KC_TAG}
+FROM quay.io/keycloak/keycloak:26.0
 COPY --from=ubi-micro-build /etc/pki /etc/pki
 
 USER ${KC_USER}