7.3
Élevée
CVE-2026-15571 A flaw was found in the legacy client-initiated account-linking endpoint of Keycloak, a widely used open-source identity…
Description
A flaw was found in the legacy client-initiated account-linking endpoint of Keycloak, a widely used open-source identity and access management solution. The mechanism used to protect the account-linking process from unauthorized requests relies on a hash that can be predicted by a malicious OIDC client. By tricking a user into authenticating, an attacker-controlled client can forge a valid linking URL to connect the victim's account to an attacker's external identity. This results in a full account takeover, allowing the attacker to log in as the victim.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Red Hat build of Keycloak 26.6.6 | Versions non publiées | |
| Red Hat Data Grid 8 | Versions non publiées | |
| Red Hat JBoss Enterprise Application Platform Expansion Pack | Versions non publiées | |
| Red Hat Single Sign-On 7 | Versions non publiées | |
| Red Hat build of Keycloak 26.6 26.6 | premières → < 26.6-12 | 26.6-12 |
Références
- RHSA-2026:56523 access.redhat.com
- RHSA-2026:56524 access.redhat.com
- access.redhat.com access.redhat.com
- RHBZ#2499591 bugzilla.redhat.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Red Hat build of Keycloak 26.6.6
Les 5 CVE de Red Hat build of Keycloak 26.6.6 →
CVE-2026-18963
A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity…
9.1
Critique
CVE-2026-17048
A flaw was found in the Keycloak Admin REST API, which is used to manage security realms and clients
5.5
Moyenne
CVE-2026-14613
A vulnerability was discovered in Keycloak's administrative interface that allows certain administrators to see…
4.3
Moyenne
CVE-2026-9796
A flaw was found in Keycloak
6.5
Moyenne