Skip to content
OpenAdvisories
High WID-SEC-2026-4191 5 CVEs

Keycloak: Mehrere Schwachstellen

Published Oct 27, 2026 · Updated Oct 29, 2026 · Revision 3 · de-DE

Summary

Ein Angreifer kann mehrere Schwachstellen in Keycloak ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Daten zu manipulieren und vertrauliche Informationen offenzulegen.

Product

Keycloak ermöglicht Single Sign-On mit Identity and Access Management für moderne Anwendungen und Dienste.

Vulnerabilities 5

  • Medium 6.8
    CVE-2026-118425

    Keycloak-services: keycloak-services: redirect uri domain allowlist bypass via dns resolution to loopback

    A flaw was found in the secure-redirect-uris-enforcer client policy of Keycloak, an identity and access management solution. The issue occurs when the policy is configured to allow loopback addresses, as Keycloak resolves hostnames via DNS during validation. …

    Red Hat Red Hat Single Sign-On 7 Red Hat Build of Keycloak
  • Medium 5.4
    CVE-2026-117627

    Keycloak-services: keycloak-services: jwt authorization grant bypasses identity provider login restrictions

    A flaw was found in the JWT Authorization Grant implementation of the keycloak-services component. When an OIDC or Google identity provider is configured with specific login restrictions, such as claim filtering, these checks are correctly applied during stan…

    Red Hat Red Hat Single Sign-On 7 Red Hat Build of Keycloak
  • Medium 5.4
    CVE-2026-117859

    Keycloak-services: keycloak-services: par single-use bypass via flow restart

    A flaw was found in the Pushed Authorization Request PAR implementation of the keycloak-services component. The issue occurs when an authentication flow is restarted, which incorrectly clears the internal markers used to track PAR consumption while leaving th…

    Red Hat Red Hat Single Sign-On 7 Red Hat Build of Keycloak
  • Medium 5.3
    CVE-2026-117688

    Keycloak-services: keycloak-services: vault secret disclosure via client registration installation configuration

    A flaw was found in the client registration component of Keycloak, an open-source identity and access management solution. When a vault provider is used to store sensitive information, an authenticated client owner can use a specially crafted reference to tri…

    Red Hat Red Hat Single Sign-On 7 Red Hat Build of Keycloak
  • Medium 4.2
    CVE-2026-118030

    Keycloak-services: keycloak-services: hotp race condition allows single otp code reuse across concurrent logins

    A flaw was found in the HOTP authentication mechanism of the keycloak-services component, which provides identity and access management services. The issue occurs because the system validates a one-time password and updates its internal counter in two separat…

    Red Hat Red Hat Single Sign-On 7 Red Hat Build of Keycloak

Revision history

  1. #3

    Referenz(en) aufgenommen: EUVD-2026-112916

  2. #2

    Referenz(en) aufgenommen: EUVD-2026-112640

  3. #1

    Initiale Fassung

References