Skip to content
fr Sign in
7.7 High

CVE-2026-2092 A flaw was found in Keycloak

Description

A flaw was found in Keycloak. Keycloak's Security Assertion Markup Language (SAML) broker endpoint does not properly validate encrypted assertions when the overall SAML response is not signed. An attacker with a valid signed SAML assertion can exploit this by crafting a malicious SAML response. This allows the attacker to inject an encrypted assertion for an arbitrary principal, leading to unauthorized access and potential information disclosure.

Affected products and versions

Product Affected versions Fixed in
Red Hat build of Keycloak 26.2 26.2 earliest → < 26.2-16 26.2-16
Red Hat build of Keycloak 26.4 26.4 earliest → < 26.4-12 26.4-12
Red Hat build of Keycloak 26.2.14 Versions not published
Red Hat build of Keycloak 26.4.10 Versions not published
Red Hat Single Sign-On 7 Versions not published
Red Hat Single Sign-On 7.6.13 Versions not published
RHEL-8 based Middleware Containers 7.6 earliest → < 7.6-85 7.6-85
Red Hat Single Sign-On 7.6 for RHEL 8 Versions not published
Red Hat Single Sign-On 7.6 for RHEL 9 Versions not published
Show the other branch
Product Affected versions Fixed in
Red Hat Single Sign-On 7.6 for RHEL 7 Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Red Hat build of Keycloak 26.2

The 26 CVEs of Red Hat build of Keycloak 26.2 →
CVE-2026-7507 A session fixation vulnerability was found in Keycloak's login-actions endpoints 7.5 High CVE-2026-7504 A flaw was found in Keycloak's URL validation logic during redirect operations 8.1 High CVE-2026-7307 A flaw was found in Keycloak 7.5 High CVE-2026-4636 A flaw was found in Keycloak 8.1 High
Track this CVE