Skip to content
fr Sign in
5.3 Medium

CVE-2026-2575 A flaw was found in Keycloak

Description

A flaw was found in Keycloak. An unauthenticated remote attacker can trigger an application level Denial of Service (DoS) by sending a highly compressed SAMLRequest through the SAML Redirect Binding. The server fails to enforce size limits during DEFLATE decompression, leading to an OutOfMemoryError (OOM) and subsequent process termination. This vulnerability allows an attacker to disrupt the availability of the service.

Affected products and versions

Product Affected versions Fixed in
Red Hat build of Keycloak 26.4 26.4 earliest → < 26.4-12 26.4-12
Red Hat build of Keycloak 26.4.10 Versions not published
Red Hat Single Sign-On 7 Versions not published
Red Hat Single Sign-On 7.6.13 Versions not published
RHEL-8 based Middleware Containers 7.6 earliest → < 7.6-85 7.6-85
Red Hat Single Sign-On 7.6 for RHEL 8 Versions not published
Red Hat Single Sign-On 7.6 for RHEL 9 Versions not published
Red Hat Single Sign-On 7.6 for RHEL 7 Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Red Hat build of Keycloak 26.4

The 87 CVEs of Red Hat build of Keycloak 26.4 →
CVE-2026-19607 A flaw was found in the first-broker-login flow of the keycloak-services component 5.3 Medium CVE-2026-17526 Keycloak is an open-source identity and access management solution 7.2 High CVE-2026-79651 A flaw was found in the theme localization endpoints of the keycloak-services component, which is the core service… 7.5 High CVE-2026-74909 Keycloak provides a policy enforcer to protect applications by matching incoming web requests against defined security… 8.1 High
Track this CVE