# Redpanda v26.1.8

- Product: Redpanda (https://whatsnew.fyi/product/redpanda)
- Vendor: Redpanda Data
- Date: 2026-05-14
- Version: v26.1.8
- Original notes: https://github.com/redpanda-data/redpanda/releases/tag/v26.1.8
- Permalink: https://whatsnew.fyi/product/redpanda/releases/v26.1.8

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **added** — New configuration option iceberg_rest_catalog_credentials_host to specify the hostname for retrieving role-based credentials for the Iceberg REST catalog
- **fixed** — Avoid out-of-memory errors under memory fragmentation when there are many ACLs
- **fixed** — Fix Iceberg map columns being unreadable from strict Parquet readers due to missing LogicalType.MAP annotation in the written Parquet schema
- **fixed** — Fix Cloud Topics garbage collection leaving stale objects in the bucket when deleting all cloud topics
- **fixed** — Fix Iceberg REST catalog credential refresh requests being sent to the wrong host when cloud_storage_credentials_host was set
- **security** — Upgrade libxml2 to v2.15.3 to fix CVE-2026-6732 type confusion vulnerability in XSD validation
- **fixed** — Fix Schema Registry protobuf compatibility checks incorrectly failing with MESSAGE_REMOVED when a map field is removed
- **fixed** — Fix rpk debug bundle deduplication of admin addresses across host forms
- **fixed** — Cap fetch memory allocation at max message size limit

##### Features
* New configuration: `iceberg_rest_catalog_credentials_host`: The hostname to connect to for retrieving role-based credentials for the Iceberg REST catalog. May be required when the REST catalog uses a different credentials source than cloud storage — for example, if cloud storage is configured to use STS with a custom credentials host, but the REST catalog uses aws_instance_metadata, this should be set to 169.254.169.254 to prevent the cloud storage host override from applying to catalog credential requests. by @wdberkeley in [#30446](https://github.com/redpanda-data/redpanda/pull/30446)

##### Bug Fixes
* Avoid OOM under memory fragmentation when there are many ACLs. by @pgellert in [#30401](https://github.com/redpanda-data/redpanda/pull/30401)
* Fix Iceberg map columns being unreadable from strict Parquet readers
(e.g. Apache Spark) due to a missing `LogicalType.MAP` annotation in
the written Parquet schema. by @nvartolomei in [#30457](https://github.com/redpanda-data/redpanda/pull/30457)
* Fix an issue with Clout Topics garbage collection where deleting all cloud topics could leave stale objects in the bucket, forever. by @oleiman in [#30283](https://github.com/redpanda-data/redpanda/pull/30283)
* Iceberg REST catalog credential refresh requests were sent to the wrong host when cloud_storage_credentials_host was set. The host override intended for cloud storage was applied globally, causing catalog credential fetches to fail if the catalog used a different credentials source with a different expected endpoint. by @wdberkeley in [#30446](https://github.com/redpanda-data/redpanda/pull/30446)
* Upgraded libxml2 to v2.15.3 to fix CVE-2026-6732 type confusion vulnerability in XSD validation. by @tyson-redpanda in [#30393](https://github.com/redpanda-data/redpanda/pull/30393)
* [#30437](https://github.com/redpanda-data/redpanda/issues/30437) Schema Registry: fixed protobuf compatibility checks incorrectly failing
with `MESSAGE_REMOVED` when a map field is removed. by @QueLLL in [#30438](https://github.com/redpanda-data/redpanda/pull/30438)
* rpk/debug/bundle: dedup admin addresses across host forms by @hidalgopl in [#30411](https://github.com/redpanda-data/redpanda/pull/30411)
* PR [#30313](https://github.com/redpanda-data/redpanda/pull/30313) kafka/server: cap fetch memory allocation at max message size limit by @ballard26

**Full Changelog**: https://github.com/redpanda-data/redpanda/compare/v26.1.7...v26.1.8