Bitbucket 9.1 dies August 27 —
and a version dies every month through year-end.
Bitbucket Data Center 9.1 reaches end of support on August 27, 2026 — two years to the day after its release, because that is exactly what Atlassian’s lifecycle policy promises: “Atlassian supports releases for two years after the initial feature or Long-Term Support (LTS) release.” No drama, no surprise — and that is precisely the trap. A clock this predictable produces a cadence most teams never internalize: from this month to December, a Bitbucket version leaves support every single month.
The monthly cascade
| Version | Released | End of support | Time left at publication | Risk score |
|---|---|---|---|---|
| 9.1 | 2024-08-27 | 2026-08-27 | 11 days | 45 |
| 9.2 | 2024-09-24 | 2026-09-24 | 39 days | 45 |
| 9.3 | 2024-10-29 | 2026-10-29 | 74 days | 45 |
| 9.4 (LTS) | 2024-12-02 | 2026-12-03 | 109 days | 38 |
| 10.2 (LTS) | 2026-03-03 | 2028-03-03 | 18+ months | 30 |
The pattern to notice: even the 9.4 LTS dies this year. An “upgrade to LTS” ticket filed today that targets 9.4 buys 109 days. The two-year clock does not care which release wears the LTS badge — it started when the release shipped.
Why unpatched Bitbucket is a proven target, not a theoretical one
Bitbucket carries something most Data Center products do not: a CISA Known Exploited Vulnerabilities entry. CVE-2022-36804 — command injection in Bitbucket Server and Data Center — was exploited widely enough in the wild to enter the KEV catalog in September 2022. That history is baked into the product’s risk profile on this site (its KEV factor contributes 20 of Bitbucket’s product-level score), and it is the reason the end-of-support date matters more here than for a wiki or an issue tracker: a source-code host holds credentials, signing secrets, and the supply chain itself. When patches stop, the target stays.
Skip the treadmill: 10.2 LTS or the ladder
Two honest options. Bitbucket 10.2 LTS is the destination with runway — supported to March 3, 2028, and scoring 30 today. The 10.x platform jump carries the usual major-version checks (plugins, integrations, Java/database baselines), which is exactly why doing it once beats doing 9.x hops monthly. If constraints force an intermediate step, 9.4 LTS is at least a supported rung — but book the 10.x move in the same quarter, because its December 3 end-of-support arrives inside four months.
If neither can happen before August 27: an out-of-support source-code host on the internet is an audit finding with a CVE history. Restrict access to VPN-only, review tokens and webhooks, and put a date on the exception — the Atlassian Server/DC ghost-fleet piece is the longer version of why parked Atlassian instances keep getting ransomed.
Every Bitbucket version’s dates and EOL Risk Scores are on the Bitbucket lifecycle page, updated at every build from upstream data.
Frequently Asked Questions
When does Bitbucket 9.1 reach end of support?
August 27, 2026 — exactly two years after its August 27, 2024 release, under Atlassian's Data Center policy of supporting each release for two years after the initial feature or LTS release.
Which Bitbucket versions die after 9.1?
The two-year clock retires them monthly: 9.2 on September 24, 2026, 9.3 on October 29, 2026, and the 9.4 LTS on December 3, 2026. By year-end, everything before 9.5 is out of support. The current long-runway option is 10.2 LTS, supported to March 3, 2028.
Is running an end-of-support Bitbucket actually dangerous?
Bitbucket has a documented history of being exploited at scale: CVE-2022-36804, a command-injection flaw in Bitbucket Server and Data Center, is in CISA's Known Exploited Vulnerabilities catalog. Source-code hosts hold credentials, secrets, and supply-chain leverage, which is why unpatched instances attract attention quickly once fixes stop.
What should Bitbucket 9.1 users upgrade to?
Bitbucket 10.2 LTS, supported to March 3, 2028, is the destination with real runway. Upgrading within 9.x (to 9.4 LTS) buys only until December 3, 2026 — you would be repeating this exercise inside four months.