Keycloak: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 6

• High 8.1
  CVE-2026-4636

  Keycloak: keycloak: uma policy bypass allows authenticated users to gain unauthorized access to victim-owned resources.

  A flaw was found in Keycloak. An authenticated user with the uma_protection role can bypass User-Managed Access (UMA) policy validation. This allows the attacker to include resource identifiers owned by other users in a policy creation request, even if the UR…

  Red Hat Red Hat build of Keycloak 26.4 Red Hat build of Keycloak 26.2 Red Hat build of Keycloak 26.4.11 Wolfi Maven
  Apr 2, 2026
• High 7.5
  CVE-2026-4634

  Keycloak: keycloak: denial of service via excessive processing of openid connect scope parameters

  A flaw was found in Keycloak. An unauthenticated attacker can exploit this vulnerability by sending a specially crafted POST request with an excessively long scope parameter to the OpenID Connect (OIDC) token endpoint. This leads to high resource consumption …

  Red Hat Red Hat build of Keycloak 26.4 RHEL-8 based Middleware Containers Red Hat Single Sign-On 7.6 for RHEL 7 Wolfi Maven
  Apr 2, 2026
• High 7.4
  CVE-2026-4282 Public exploit

  Keycloak: keycloak: privilege escalation via forged authorization codes due to singleuseobjectprovider isolation flaw

  A flaw was found in Keycloak. The SingleUseObjectProvider, a global key-value store, lacks proper type and namespace isolation. This vulnerability allows an unauthenticated attacker to forge authorization codes. Successful exploitation can lead to the creatio…

  Red Hat Red Hat build of Keycloak 26.4 Red Hat build of Keycloak 26.2 Red Hat build of Keycloak 26.4.11 Wolfi Maven
  Apr 2, 2026
• High 7.3
  CVE-2026-3872

  Keycloak: keycloak: information disclosure due to redirect_uri validation bypass

  A flaw was found in Keycloak. This issue allows an attacker, who controls another path on the same web server, to bypass the allowed path in redirect Uniform Resource Identifiers (URIs) that use a wildcard. A successful attack may lead to the theft of an acce…

  Red Hat Red Hat build of Keycloak 26.4 Red Hat build of Keycloak 26.2 Red Hat build of Keycloak 26.4.11 Wolfi Maven
  Apr 2, 2026
• Medium 6.9
  CVE-2026-1002

  Eclipse Vert.x Web static handler file access denial

  The Vert.x Web static handler component cache can be manipulated to deny the access to static files served by the handler using specifically crafted request URI. The issue comes from an improper implementation of the C. rule of section 5.2.4 of RFC3986 and is…

  Eclipse Vert.x Eclipse Vert.x druid keycloak-26.5-iamguarded-compat Wolfi Maven
  Jan 15, 2026
• Medium 5.3
  CVE-2026-4325

  Keycloak: keycloak: replay of action tokens via improper handling of single-use entries

  A flaw was found in Keycloak. The SingleUseObjectProvider, a global key-value store, lacks proper type and namespace isolation. This vulnerability allows an attacker to delete arbitrary single-use entries, which can enable the replay of consumed action tokens…

  Red Hat Red Hat build of Keycloak 26.4 Red Hat build of Keycloak 26.2 Red Hat build of Keycloak 26.4.11 Wolfi Maven
  Apr 2, 2026

Revision history

1. 2026-10-13 #4

   Neue Updates von IBM aufgenommen

2. 2026-06-10 #3

   Neue Updates von Red Hat aufgenommen

3. 2026-04-14 #2

   Neue Updates von Red Hat aufgenommen

4. 2026-04-06 #1

   Initiale Fassung

References

• Keycloak 26.5.7 release notes vom 2026-04-06
  https://www.keycloak.org/2026/04/keycloak-2657-released
• Keycloak GitHub Issue 45569 vom 2026-04-06
  https://github.com/keycloak/keycloak/issues/45569
• Keycloak GitHub Issue 47718 vom 2026-04-06
  https://github.com/keycloak/keycloak/issues/47718
• GitHub Security Advisory GHSA-cjm2-j6cm-6p6m vom 2026-04-06
  https://github.com/advisories/GHSA-cjm2-j6cm-6p6m
• Keycloak GitHub Issue 47719 vom 2026-04-06
  https://github.com/keycloak/keycloak/issues/47719
• GitHub Security Advisory GHSA-hj93-h7pg-fh6v vom 2026-04-06
  https://github.com/advisories/GHSA-hj93-h7pg-fh6v
• Keycloak GitHub Issue 47715 vom 2026-04-06
  https://github.com/keycloak/keycloak/issues/47715
• GitHub Security Advisory GHSA-rx66-hj7g-28h7 vom 2026-04-06
  https://github.com/advisories/GHSA-rx66-hj7g-28h7
• Keycloak GitHub Issue 47716 vom 2026-04-06
  https://github.com/keycloak/keycloak/issues/47716
• GitHub Security Advisory GHSA-h4wv-g838-66g3 vom 2026-04-06
  https://github.com/advisories/GHSA-h4wv-g838-66g3
• Keycloak GitHub Issue 47717 vom 2026-04-06
  https://github.com/keycloak/keycloak/issues/47717
• GitHub Security Advisory GHSA-f2hx-5fx3-hmcv vom 2026-04-06
  https://github.com/advisories/GHSA-f2hx-5fx3-hmcv
• Red Hat Security Advisory RHSA-2026:6477 vom 2026-04-02
  https://access.redhat.com/errata/RHSA-2026:6477
• Red Hat Security Advisory RHSA-2026:6475 vom 2026-04-02
  https://access.redhat.com/errata/RHSA-2026:6475
• Red Hat Security Advisory RHSA-2026:6476 vom 2026-04-02
  https://access.redhat.com/errata/RHSA-2026:6476
• Red Hat Security Advisory RHSA-2026:6478 vom 2026-04-02
  https://access.redhat.com/errata/RHSA-2026:6478
• Red Hat Security Advisory RHSA-2026:7380 vom 2026-04-15
  https://access.redhat.com/errata/RHSA-2026:7380
• Red Hat Security Advisory RHSA-2026:25089 vom 2026-06-10
  https://access.redhat.com/errata/RHSA-2026:25089
• IBM Security Bulletin 7292374 vom 2026-10-14
  https://www.ibm.com/support/pages/node/7292374