Magento 2.4.8 Released: What You Need to Know

Magento 2.4.8 officially launched on 8 April 2025, bringing with it key improvements in security, performance, and platform stability. Whether you’re a merchant or developer, this release is essential for maintaining a secure, modern, and high-performing eCommerce store.

Here’s a breakdown of the most important updates and what they mean for your business.

Security Enhancements

Magento 2.4.8 introduces several vital updates to strengthen your store’s defences:

• Duo Security 2FA Update
  Duo’s two-factor authentication now uses the latest Web SDK v4, enabling smoother integration with the Duo Universal Prompt. Merchants must now enter a Client ID and Secret in Admin settings to complete the configuration.
  
• Encryption Key Management Improvements
  Encryption key handling has been reworked for greater usability. New CLI commands are available for rotating keys and re-encrypting selected data. Please note: the ability to change encryption keys via the Admin panel has been removed.
  
• One-Time Password (OTP) Settings
  To resolve issues introduced in version 2.4.7, the OTP Window default has changed from 1 to 29, improving compatibility and reliability.
  
• Subresource Integrity (SRI) Updates
  The SRI system has been refactored to boost performance. SRI hashes are now stored in the pub/static directory, eliminating the need to redeploy static content after cache flushes.
  

Platform Upgrades

Magento 2.4.8 keeps your site up to date with the latest technologies:

• PHP Compatibility
  Now supports PHP 8.4 and drops support for PHP 8.1. Merchants should upgrade to PHP 8.3 or 8.4 to maintain compatibility.
  
• Database Support
  Adds support for MariaDB 11.4 and MySQL 8.4, aligning with the latest LTS (Long-Term Support) releases for better security and performance.
  
• Message Queue Enhancements
  Now compatible with RabbitMQ 4.x. Merchants must switch from classic mirrored queues to quorum queues, as the former are no longer supported in this version.
  
• Search Engine Optimisation
  Magento now works with OpenSearch 2.19, replacing Elasticsearch. If you haven’t done so already, transition to OpenSearch to maintain compatibility and receive ongoing updates.
  

Performance & Quality Improvements

Magento 2.4.8 focuses on speed, scalability, and ease of use:

• Indexer Mode Update
  The default indexer mode is now Update by Schedule, reducing system load and improving indexing reliability.
  
• Faster Bulk Operations
  Bulk updates—especially using the /V1/products/tier-prices REST API—are now faster and more efficient.
  
• Improved Inventory Synchronisation
  Updates to the Inventory Indexer remove hidden dependencies, resulting in smoother product creation, stock updates, and visibility changes.
  
• Clearer Order Management
  On the order details page, the “Submit Comment” button has been renamed “Update” to avoid confusion and improve admin usability.
  

GraphQL & API Enhancements

More flexibility for developers working with headless architecture and APIs:

• Streamlined Checkout for Free Orders
  Magento can now automatically apply free payment methods on zero-total orders. Terms & Conditions are dynamically handled via StoreConfig.
  
• Cart Rule Visibility via GraphQL
  You can now retrieve active cart and catalogue rules through GraphQL, improving order and promotion management for custom front-ends.
  

Bug Fixes

Magento 2.4.8 resolves a wide range of issues:

• 582 fixes in Adobe Commerce
  
• 497 fixes in Magento Open Source
  

Highlights include:

• A fix for infinite loops when querying the /V1/transactions REST API
  
• Resolution of GraphQL type issues found in version 2.4.7
  

Upgrade Recommendations

If you’re currently using:

• Versions 2.4.4 – 2.4.6: You should apply the latest security patches and plan to upgrade to 2.4.8 soon. Support for these versions ends between April and August 2026.
  
• Version 2.4.7: You have until April 2027, but upgrading now ensures you’re benefiting from the latest features and fixes.
  

Final Thoughts from Kiwi Commerce

Magento 2.4.8 is a critical update for any business serious about site speed, security, and future-proofing their platform. From backend upgrades to API improvements and essential bug fixes, this release sets your store up for long-term success.

Need help with your upgrade or want to explore what these changes mean for your site? Get in touch with the team at Kiwi Commerce—we’re here to guide you through it.