Skip to content
fr Sign in
7.3 High

CVE-2026-15571 A flaw was found in the legacy client-initiated account-linking endpoint of Keycloak, a widely used open-source identity…

Description

A flaw was found in the legacy client-initiated account-linking endpoint of Keycloak, a widely used open-source identity and access management solution. The mechanism used to protect the account-linking process from unauthorized requests relies on a hash that can be predicted by a malicious OIDC client. By tricking a user into authenticating, an attacker-controlled client can forge a valid linking URL to connect the victim's account to an attacker's external identity. This results in a full account takeover, allowing the attacker to log in as the victim.

Affected products and versions

Product Affected versions Fixed in
Red Hat build of Keycloak 26.6.6 Versions not published
Red Hat Data Grid 8 Versions not published
Red Hat JBoss Enterprise Application Platform Expansion Pack Versions not published
Red Hat Single Sign-On 7 Versions not published
Red Hat build of Keycloak 26.6 26.6 earliest → < 26.6-12 26.6-12

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Red Hat build of Keycloak 26.6.6

The 5 CVEs of Red Hat build of Keycloak 26.6.6 →
CVE-2026-18963 A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity… 9.1 Critical CVE-2026-17048 A flaw was found in the Keycloak Admin REST API, which is used to manage security realms and clients 5.5 Medium CVE-2026-14613 A vulnerability was discovered in Keycloak's administrative interface that allows certain administrators to see… 4.3 Medium CVE-2026-9796 A flaw was found in Keycloak 6.5 Medium
Track this CVE