GHSA-R7RC-C989-86G6 Keycloak: Attacker can re-enable and take over disabled clients via registration access token

Description A flaw was found in Keycloak's client registration service. A remote attacker, possessing a previously issued Registration Access Token RAT, could exploit this vulnerability to re-enable a client that an administrator had explicitly disabled. This bypasses security controls, allowing...

EUVD-2026-39474

Keycloak: Attacker can re-enable and take over disabled clients via registration access token...

Keycloak: Attacker can re-enable and take over disabled clients via registration access token

Description A flaw was found in Keycloak's client registration service. A remote attacker, possessing a previously issued Registration Access Token RAT, could exploit this vulnerability to re-enable a client that an administrator had explicitly disabled. This bypasses security controls, allowing...

PT-2026-133251

Description A flaw was found in Keycloak's client registration service. A remote attacker, possessing a previously issued Registration Access Token RAT, could exploit this vulnerability to re-enable a client that an administrator had explicitly disabled. This bypasses security controls, allowing...

CVE-2026-116672

Authlib is a Python library which builds OAuth and OpenID Connect servers. From 0.15 until 1.9.1, the documented ClientConfigurationEndpoint.authenticateclient and ClientConfigurationEndpoint.checkpermission reference implementations look up a target client from request-controlled clientid data a...

Linux Distros Unpatched Vulnerability : CVE-2026-116672

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Authlib is a Python library which builds OAuth and OpenID Connect servers. From 0.15 until 1.9.1, the documented ClientConfigurationEndpoint.authenticateclient...

Authorization Bypass Through User-Controlled Key

Overview authlib is a library in building OAuth and OpenID Connect servers. Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the createconfigurationresponse method in authlib/oauth2/rfc7592/endpoint.py, where a registration access token issu...

DEBIAN-CVE-2026-116672

Authlib is a Python library which builds OAuth and OpenID Connect servers. From 0.15 until 1.9.1, the documented ClientConfigurationEndpoint.authenticateclient and ClientConfigurationEndpoint.checkpermission reference implementations look up a target client from request-controlled clientid data a...

CVE-2026-116672

Authlib is a Python library which builds OAuth and OpenID Connect servers. From 0.15 until 1.9.1, the documented ClientConfigurationEndpoint.authenticateclient and ClientConfigurationEndpoint.checkpermission reference implementations look up a target client from request-controlled clientid data a...

UBUNTU-CVE-2026-116672

Authlib is a Python library which builds OAuth and OpenID Connect servers. From 0.15 until 1.9.1, the documented ClientConfigurationEndpoint.authenticateclient and ClientConfigurationEndpoint.checkpermission reference implementations look up a target client from request-controlled clientid data a...

CVE-2026-116672 Authlib RFC 7592 examples omit registration-access-token client binding

Authlib is a Python library which builds OAuth and OpenID Connect servers. From 0.15 until 1.9.1, the documented ClientConfigurationEndpoint.authenticateclient and ClientConfigurationEndpoint.checkpermission reference implementations look up a target client from request-controlled clientid data a...

CVE-2026-116672

Authlib is a Python library which builds OAuth and OpenID Connect servers. From 0.15 until 1.9.1, the documented ClientConfigurationEndpoint.authenticateclient and ClientConfigurationEndpoint.checkpermission reference implementations look up a target client from request-controlled clientid data a...

CVE-2026-116672

The Authlib Python library (versions 0.15 through 1.9.1 ) is vulnerable because the reference implementations for ClientConfigurationEndpoint.authenticate_client and ClientConfigurationEndpoint.check_permission fail to verify that the request.credential belongs to the target client. Instead, they...

CVE-2026-116672 Authlib RFC 7592 examples omit registration-access-token client binding

Authlib is a Python library which builds OAuth and OpenID Connect servers. From 0.15 until 1.9.1, the documented ClientConfigurationEndpoint.authenticateclient and ClientConfigurationEndpoint.checkpermission reference implementations look up a target client from request-controlled clientid data a...

EulerOS 2.0 SP15 : systemd (EulerOS-SA-2026-2510)

According to the versions of the systemd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted optional config file.CVE-2026-40226 A flaw was...

keycloak: Keycloak: Attacker can re-enable and take over disabled clients via Registration Access Token

A flaw was found in Keycloak's client registration service. A remote attacker, possessing a previously issued Registration Access Token RAT, could exploit this vulnerability to re-enable a client that an administrator had explicitly disabled. This bypasses security controls, allowing the attacker...

Important: Red Hat Security Advisory: Red Hat build of Keycloak 26.6.4 Security Update

New Red Hat build of Keycloak 26.6.4 packages are available from the Customer Portal Red Hat build of Keycloak 26.6.4 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-on capabilities for web and mobile applications. Security fixes...

Duplicate Advisory: Keycloak: Attacker can re-enable and take over disabled clients via registration access token

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-r7rc-c989-86g6. This link is maintained to preserve external references. Original Description A flaw was found in Keycloak's client registration service. A remote attacker, possessing a previously issued...

GHSA-Q929-G23J-2RC7 Duplicate Advisory: Keycloak: Attacker can re-enable and take over disabled clients via registration access token

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-r7rc-c989-86g6. This link is maintained to preserve external references. Original Description A flaw was found in Keycloak's client registration service. A remote attacker, possessing a previously issued...

keycloak: Keycloak: Attacker can re-enable and take over disabled clients via Registration Access Token

A flaw was found in Keycloak's client registration service. A remote attacker, possessing a previously issued Registration Access Token RAT, could exploit this vulnerability to re-enable a client that an administrator had explicitly disabled. This bypasses security controls, allowing the attacker...