TI-2026-86592 CVE-2026-120984 · GHSA-2539-2x8g-x597
Code injection in Keycloak client import via JavaScript policy
Priority MEDIUM 54
A flaw was found in the Keycloak server's client management component.
Vulnerabilities
7414 records
TI-2026-86433 CVE-2026-83495 · GHSA-96cq-qg4j-3q62
Trainer TrainJob env passthrough allows namespace secret exfiltration
Priority LOW 22
A flaw was found in the Trainer v2 TrainJob API.
TI-2026-86152 CVE-2026-50240 · GHSA-xgwg-gwg9-92cx
Missing authorization in Pipelines-as-Code lets users escalate privileges
Priority LOW 38
A flaw was found in OpenShift Pipelines-as-Code (PAC).
TI-2026-86051 CVE-2026-123876 · GHSA-2fgp-24rx-f2r7
Incomplete seccomp deny rules in containers-common allow bypass
Priority LOW 19
A flaw was found in the default seccomp profile used by Podman via containers-common.
TI-2026-85763 CVE-2026-120749 · GHSA-r7wg-4x32-8p6v
D-Bus daemon aborts when a broadcast cannot be delivered to a monitor
Priority LOW 26
A flaw was found in D-Bus.
TI-2026-85762 CVE-2026-83494 · GHSA-4452-5gpc-g9w6
Immutability check bypass in training-operator PyTorchJob webhook
Priority LOW 22
A flaw was found in the training-operator.
TI-2026-85761 CVE-2026-83493 · GHSA-6w7q-9vx7-v552
Untrusted pull requests can leak secrets in distributed-workloads CI
Priority MEDIUM 47
A flaw was found in distributed-workloads.
TI-2026-85760 CVE-2026-9797 · GHSA-q88h-q5mj-rq7p
Privilege escalation in Keycloak via client administration
Priority LOW 31
A flaw was found in Keycloak's administrative services (org.keycloak.services.resources.admin).
TI-2026-85735 CVE-2026-97848 · GHSA-43w4-wpq4-5p8q
Keycloak protocol mapper lets forged client roles reach tokens
Priority LOW 29
A flaw was found in the token sanitization logic of Keycloak, an open source identity and access management solution.
TI-2026-85734 CVE-2026-97367 · GHSA-mw2g-fcj2-v82h
Keycloak Account REST API lets attackers take over user sessions
Priority LOW 30
A flaw was found in the Keycloak Account REST API where it incorrectly handles session identification.
TI-2026-85733 CVE-2026-96547 · GHSA-x8ch-fp9w-fgvx
Keycloak client registration lets attackers forge roles
Priority LOW 29
A flaw was found in the Dynamic Client Registration component of Keycloak, an open-source identity and access management solution.
TI-2026-85732 CVE-2026-96460 · GHSA-pfrc-rpch-683c
Keycloak token exchange lets requesters extend access indefinitely
Priority LOW 24
A flaw was found in the token exchange mechanism of Keycloak.
TI-2026-85730 CVE-2026-92856 · GHSA-p9f7-q656-992q
Keycloak SAML broker ignores ProxyRestrictions sharing limits
Priority LOW 22
A flaw was found in the SAML brokering component of Keycloak, an identity and access management solution.
TI-2026-85726 CVE-2026-19688 · GHSA-5624-rq7x-6m4q
Keycloak-services: keycloak-services: admin api missing audience check
Priority LOW 32
A flaw was found in the Admin REST API of Keycloak, an identity and access management solution.
TI-2026-85731 CVE-2026-96447 · GHSA-7frc-6h33-jg59
Keycloak token validation falls back to usernames in stateless tokens
Priority LOW 19
A flaw was found in the TokenManager component of Keycloak, an open-source identity and access management solution.
TI-2026-85737 CVE-2026-109081 · GHSA-5g6f-qmff-3rjc
Keycloak-services: keycloak-services: injection of roles into realm default-roles via dcr endpoint
Priority LOW 30
A flaw was found in Keycloak.
TI-2026-85736 CVE-2026-107124 · GHSA-4xg4-7vg6-wc2m
Keycloak session fixation via OIDC logout id_token_hint allows account takeover
Priority LOW 29
A flaw was found in the OIDC logout endpoint of the keycloak-services component, which handles user session termination in Red Hat Build of Keycloak.
TI-2026-85723 CVE-2026-121837 · GHSA-qj4g-mq5j-8wmv
Quarkus REST Data Panache skips getter-level @SecureField checks
Priority LOW 19
A flaw was found in the REST Data Panache component of Quarkus.
TI-2026-85724 CVE-2026-123037 · GHSA-cvj4-ggf5-jg54
Symlink following in Ansible-core user module allows root escalation
Priority LOW 30
A flaw was found in the ansible-core user module.
TI-2026-85538 CVE-2026-97847 · GHSA-8jjf-j496-4j4c
Keycloak lets client managers impersonate administrators
Priority LOW 31
A flaw was found in the protocol mapper and identity resolution components of Keycloak.
TI-2026-85537 CVE-2026-97175 · GHSA-9gcf-99g8-425c
Keycloak-services: unverified IdP email auto-linking enables account takeover
Priority LOW 38
A flaw was found in the idp-auto-link authenticator of the keycloak-services component, which handles user identity federation.
TI-2026-85536 CVE-2026-97174 · GHSA-42wm-mqj8-5cwr
Keycloak CIBA injection lets attackers receive tokens for other users
Priority LOW 32
A flaw was found in the Client-Initiated Backchannel Authentication (CIBA) implementation of Keycloak.
TI-2026-85535 CVE-2026-96453 · GHSA-p934-9hpw-698j
Keycloak Admin CLI kcadm accepts arbitrary self-signed certificates
Priority LOW 34
A flaw was found in the Keycloak Admin CLI kcadm tool, which is used by administrators to manage Keycloak servers from the command line.
TI-2026-85534 CVE-2026-93998 · GHSA-rxhm-ghrc-q7h4
Keycloak SAML adapter accepts assertions from wrong identity provider
Priority LOW 34
A flaw was found in the SAML adapter component of Keycloak, which is used to secure applications with SAML-based authentication.
TI-2026-85533 CVE-2026-92857 · GHSA-xw5c-j6m6-2hxj
Keycloak client registration mapper lets attackers forge token claims
Priority LOW 35
Keycloak provides a Dynamic Client Registration feature that allows users with specific tokens to register their own applications.