diff --git a/0026-versionlock-Document-that-local-packages-are-not-aff.patch b/0026-versionlock-Document-that-local-packages-are-not-aff.patch
new file mode 100644
index 0000000..6005b70
--- /dev/null
+++ b/0026-versionlock-Document-that-local-packages-are-not-aff.patch
@@ -0,0 +1,36 @@
+From c3ddd35dc52d504b8c2875fccaf2559a02ca1a77 Mon Sep 17 00:00:00 2001
+From: =?UTF-8?q?Petr=20P=C3=ADsa=C5=99?= <ppisar@redhat.com>
+Date: Mon, 1 Dec 2025 17:40:46 +0100
+Subject: [PATCH] versionlock: Document that local packages are not affected
+
+Upstream commit: fa966d83e340c5df12942656da0f8c5c66eac556
+
+Local packages are added to a sack after the versionlock plugin logic
+runs, so the plugin cannot exclude them from an installation.
+
+This patch documents this deficiency.
+
+Resolve: #585
+Resolve: https://issues.redhat.com/browse/RHEL-94014
+Resolve: https://issues.redhat.com/browse/RHEL-94828
+---
+ doc/versionlock.rst | 3 +++
+ 1 file changed, 3 insertions(+)
+
+diff --git a/doc/versionlock.rst b/doc/versionlock.rst
+index 1ac7196..c4a931c 100644
+--- a/doc/versionlock.rst
++++ b/doc/versionlock.rst
+@@ -47,6 +47,9 @@ excludes a package that matches the version exactly.
+ Note the versionlock plugin does not apply any excludes in non-transactional
+ operations like `repoquery`, `list`, `info`, etc.
+ 
++Note that the versionlock plugin only applies to in-repository packages.
++Packages passed on the DNF command line as local files won't be affected.
++
+ --------
+ Synopsis
+ --------
+-- 
+2.52.0
+
diff --git a/dnf-plugins-core.spec b/dnf-plugins-core.spec
index 69b2133..cfac077 100644
--- a/dnf-plugins-core.spec
+++ b/dnf-plugins-core.spec
@@ -34,7 +34,7 @@
 
 Name:           dnf-plugins-core
 Version:        4.3.0
-Release:        24%{?dist}
+Release:        25%{?dist}
 Summary:        Core Plugins for DNF
 License:        GPLv2+
 URL:            https://github.com/rpm-software-management/dnf-plugins-core
@@ -61,6 +61,7 @@ Patch22:        0022-reposync-Avoid-multiple-downloads-of-duplicate-packa.patch
 Patch23:        0023-multisig-A-new-plugin-for-verifying-extraordinary-RP.patch
 Patch24:        0024-multisig-Do-not-parse-OpenPGP-keys.patch
 Patch25:        0025-multisig-Rename-dnf4-multisig-8-manual-page-to-dnf-m.patch
+Patch26:        0026-versionlock-Document-that-local-packages-are-not-aff.patch
 
 BuildArch:      noarch
 BuildRequires:  cmake >= 3.14
@@ -827,6 +828,9 @@ ln -sf %{_mandir}/man1/%{yum_utils_subpackage_name}.1.gz %{buildroot}%{_mandir}/
 %endif
 
 %changelog
+* Tue Dec 02 2025 Petr Pisar <ppisar@redhat.com> - 4.3.0-25
+- Document that local packages are not affected by versionlock (RHEL-94014)
+
 * Fri Oct 03 2025 Petr Pisar <ppisar@redhat.com> - 4.3.0-24
 - Rename dnf4-multisig(8) manual page to dnf-multisig(8) (RHEL-117134)