KeyCloak - Information Exposure

A flaw was found in keycloak in versions prior to 13.0.0. The client registration endpoint allows fetching information about PUBLIC clients like client secret without authentication which could be an issue if the same PUBLIC client changed to CONFIDENTIAL later. The highest threat from this...

Keycloak - SAML Core Package Signature Validation Flaw

A flaw exists in the SAML signature validation method within the Keycloak XMLSignatureUtil class. The method incorrectly determines whether a SAML signature is for the full document or only for specific assertions based on the position of the signature in the XML document, rather than the Referen...

Keycloak < 24.0.5 - Broken Access Control

A flaw was found in Keycloak. Certain endpoints in Keycloak's admin REST API allow low-privilege users to access administrative functionalities. This flaw allows users to perform actions reserved for administrators, potentially leading to data breaches or system compromise. id: CVE-2024-3656 info...

Keycloak - Open Redirect

A misconfiguration flaw was found in Keycloak. This issue can allow an attacker to redirect users to an arbitrary URL if a 'Valid Redirect URI' is set to http://localhost or http://127.0.0.1, enabling sensitive information such as authorization codes to be exposed to the attacker, potentially...

Keycloak < 26.7.2 - Unauthenticated Account Takeover via Reset-Credentials Bypass

Keycloak versions prior to 26.7.2, 26.6.6, and 26.4.15 contain a flaw in the reset-credentials flow that allows an unauthenticated attacker to bypass email verification and take over any user account. Two bugs are chained: 1 the tryAnotherWay handler stores a generic "true" selector note not scop...

Important: Red Hat Security Advisory: Red Hat build of Keycloak 26.6.9 Images Security Update

New images are available for Red Hat build of Keycloak 26.6.9 and Red Hat build of Keycloak 26.6.9 Operator, running on OpenShift Container Platform Red Hat build of Keycloak is an integrated sign-on solution, available as a Red Hat JBoss Middleware for OpenShift containerized image. The Red Hat...

Important: Red Hat Security Advisory: Red Hat build of Keycloak 26.6.9 Security Update

New Red Hat build of Keycloak 26.6.9 packages are available from the Customer Portal Red Hat build of Keycloak 26.6.9 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-on capabilities for web and mobile applications. Security fixes...

keycloak-services: keycloak-services: SAML redirect binding signature bypass via percent-encoded parameter names

A flaw was found in the SAML HTTP-Redirect binding implementation of Keycloak. The issue occurs because the server processes percent-encoded parameter names like %53AMLResponse while the signature verification logic only checks literal parameter names. An attacker can use this discrepancy to...

EUVD-2026-119254

A flaw was found in the Keycloak server's client management component. When a client is created or imported with authorization services enabled, the system fails to properly clear an internal session attribute used during the setup process. This allows an authenticated attacker with client...

CVE-2026-120984

A flaw in the Keycloak server's client management component allows an authenticated attacker with client management permissions to achieve arbitrary code execution . The root cause is a failure to properly clear an internal session attribute during the creation or import of a client with authoriz...

Keycloak <= 12.0.1 - request_uri Blind Server-Side Request Forgery (SSRF)

Keycloak 12.0.1 and below allows an attacker to force the server to request an unverified URL using the OIDC parameter requesturi. This allows an attacker to execute a server-side request forgery SSRF attack. id: CVE-2020-10770 info: name: Keycloak = 12.0.1 - requesturi Blind Server-Side Request...

Keycloak 10.0.0 - 18.0.0 - Cross-Site Scripting

Keycloak 10.0.0 to 18.0.0 contains a cross-site scripting vulnerability via the client-registrations endpoint. On a POST request, the application does not sanitize an unknown attribute name before including it in the error response with a 'Content-Type' of text/hml. Once reflected, the response i...

GO-2026-6789 vulnerabilities

Vulnerabilities for packages: grafana, crossplane-provider-aws-ec2, crossplane-provider-family-azure, terraform-provider-grafana, crossplane-provider-aws-s3, crossplane-provider-azure-sql, crossplane-provider-azure-managedidentity, crossplane-provider-aws-firehose, gitness,...

GO-2026-6795 vulnerabilities

Vulnerabilities for packages: grafana, crossplane-provider-aws-ec2, crossplane-provider-family-azure, terraform-provider-grafana, crossplane-provider-aws-s3, crossplane-provider-azure-sql, crossplane-provider-azure-managedidentity, crossplane-provider-aws-firehose, gitness,...

GO-2026-6769 vulnerabilities

Vulnerabilities for packages: grafana, crossplane-provider-aws-ec2, crossplane-provider-family-azure, terraform-provider-grafana, crossplane-provider-aws-s3, crossplane-provider-azure-sql, crossplane-provider-azure-managedidentity, crossplane-provider-aws-firehose, gitness,...

GO-2026-6783 vulnerabilities

Vulnerabilities for packages: grafana, crossplane-provider-aws-ec2, crossplane-provider-family-azure, terraform-provider-grafana, crossplane-provider-aws-s3, crossplane-provider-azure-sql, crossplane-provider-azure-managedidentity, crossplane-provider-aws-firehose, gitness,...

GO-2026-6785 vulnerabilities

Vulnerabilities for packages: grafana, crossplane-provider-aws-ec2, crossplane-provider-family-azure, terraform-provider-grafana, crossplane-provider-aws-s3, crossplane-provider-azure-sql, crossplane-provider-azure-managedidentity, crossplane-provider-aws-firehose, gitness,...

GO-2026-6800 vulnerabilities

Vulnerabilities for packages: grafana, crossplane-provider-aws-ec2, crossplane-provider-family-azure, terraform-provider-grafana, crossplane-provider-aws-s3, crossplane-provider-azure-sql, crossplane-provider-azure-managedidentity, crossplane-provider-aws-firehose, gitness,...

GHSA-C9GR-GMG4-2VQV vulnerabilities

Vulnerabilities for packages: grafana, bento, traefik, grafana-pyroscope, duckdb, bun, mitmproxy, cilium, kubeflow-katib, rclone, keycloak, open-webui, loki, mattermost, zipkin, jitsucom-bulker, brunsli, dapr, envoy, bun-bootstrap, istio-envoy, gftools, pysilfont, dotnet-sdk-stage0, k9s,...

GO-2026-6888 vulnerabilities

Vulnerabilities for packages: grafana, bento, traefik, grafana-pyroscope, duckdb, bun, mitmproxy, cilium, kubeflow-katib, rclone, keycloak, open-webui, loki, mattermost, zipkin, jitsucom-bulker, brunsli, dapr, envoy, bun-bootstrap, istio-envoy, gftools, pysilfont, dotnet-sdk-stage0, k9s,...