Red Hat Security Advisory

RHSA-2025:4335

Red Hat build of Keycloak 26.0.11 Images Update

Released 2025-04-29 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat build of Keycloak 26.0 rhbk/keycloak-operator-bundle, rhbk/keycloak-rhel9, rhbk/keycloak-rhel9-operator

TI-2025-03075 CVE-2025-3501 · GHSA-hw58-3793-42gg

MEDIUM 42

A flaw was found in Keycloak.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.0047 Published 2025-04-29 Fixed in 26.0.11, 26.2.2 +5 CWE-297

TI-2025-03456 CVE-2025-3910 · GHSA-5jfq-x6xp-7rw2

LOW 25

A flaw was found in Keycloak.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.0045 Published 2025-04-29 Fixed in 26.0.11, 26.2.2 +3 CWE-287

TI-2025-02228 CVE-2025-2559 · GHSA-2935-2wfm-hhpv

LOW 24

A flaw was found in Keycloak.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00703 Published 2025-03-25 Partial fix · 26.0.11, 26.1.5 +3 CWE-770