Description (CNA)
A flaw was found in Keycloak. The SingleUseObjectProvider, a global key-value store, lacks proper type and namespace isolation. This vulnerability allows an attacker to delete arbitrary single-use entries, which can enable the replay of consumed action tokens, such as password reset links. This could lead to unauthorized access or account compromise.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Red Hat / Red Hat build of Keycloak 26.2 | unaffected 26.2.15-1 before * |
| Red Hat / Red Hat build of Keycloak 26.2 | unaffected 26.2-18 before * |
| Red Hat / Red Hat build of Keycloak 26.2 | unaffected 26.2-18 before * |
| Red Hat / Red Hat build of Keycloak 26.2.15 | unaffected |
| Red Hat / Red Hat build of Keycloak 26.4 | unaffected 26.4.11-1 before * |
| Red Hat / Red Hat build of Keycloak 26.4 | unaffected 26.4-14 before * |
| Red Hat / Red Hat build of Keycloak 26.4 | unaffected 26.4-14 before * |
| Red Hat / Red Hat build of Keycloak 26.4.11 | unaffected |
CWE
CWE-653
References
- https://access.redhat.com/errata/RHSA-2026:6475
- https://access.redhat.com/errata/RHSA-2026:6476
- https://access.redhat.com/errata/RHSA-2026:6477
- https://access.redhat.com/errata/RHSA-2026:6478
- https://access.redhat.com/security/cve/CVE-2026-4325
- https://bugzilla.redhat.com/show_bug.cgi?id=2448351
ADP enrichment
No English description supplied.
No references supplied.