Magento 2.4.8 Is Here – What’s New & Why It Matters

A quick guide to Magento 2.4.8 release highlights

The latest Magento 2.4.8 release is officially out, and it brings a strong mix of security updates, tech stack modernization, and performance enhancements that every merchant and developer should know about.

Let’s break down some of the most important highlights:

Security Enhancements

Security is always a top priority, and Magento 2.4.8 doesn’t disappoint.

Encryption Key Management: Now CLI-only! This improves control and removes the older Admin UI method. You can now securely change keys and re-encrypt specific data using new CLI commands.

Duo Security 2FA: Upgraded to use Web SDK v4 for tighter, modernized authentication.

Vulnerability Fixes: Magento has patched vulnerabilities, including:

CVE-2025-24434– Improper Authorization

CVE-2025-24406– Path Traversal

Dependency Upgrades

Staying modern means staying current with dependencies:

league/flysystem is now on v3.x, offering better file handling

Monolog and wikimedia/less.php have been upgraded for increased performance and stability

PHP & Testing Improvements

Full support for PHP 8.3 – if you’re still on PHP 8.1, it’s time to plan an upgrade.

PHPUnit 10 brings improved testing reliability and better compatibility with future PHP versions.

UI & API Enhancements

TinyMCE WYSIWYG editor has been updated to v7.3.0, offering smoother and more secure content editing.

Require.js has moved to 2.3.7, improving JavaScript module performance.

GraphQL improvements bring better flexibility and performance—especially useful for headless builds and custom API integrations.

Platform & Database Stability

Now supports MySQL 8.4 LTS and MariaDB 11.4 LTS

Behind-the-scenes performance tweaks reduce database load, optimize caching, and improve page speed

Over 500 Quality Fixes

This release includes over 500 quality improvements, addressing bugs, enhancing functionality, and improving the overall developer and merchant experience.

Long-Term Support Until 2028

Magento 2.4.8 will receive support and updates until April 2028, making it a great long-term option for businesses planning ahead.

Time for an Upgrade?

If you’re on a previous Magento version, this is a great time to move forward. With PHP 8.3 support, enhanced security, faster performance, and extended support —If you’re using an earlier version of Magento, this is a solid opportunity to upgrade. With support for PHP 8.3, advanced security features, performance gains, and long-term stability, Magento 2.4.8 is designed to support your growth

Need Help with the Upgrade?

Whether you’re looking to plan a smooth upgrade or evaluate your store’s readiness, our team is here to help.

Let’s Connect—we’re ready to support your next move!