CVEvulnerability
CVE-2026-2575
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2026-03-18
- Last modified
- 2026-10-06
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
- Weaknesses
- CWE-409
Description
A flaw was found in Keycloak. An unauthenticated remote attacker can trigger an application level Denial of Service (DoS) by sending a highly compressed SAMLRequest through the SAML Redirect Binding. The server fails to enforce size limits during DEFLATE decompression, leading to an OutOfMemoryError (OOM) and subsequent process termination. This vulnerability allows an attacker to disrupt the availability of the service.
Affected configurations
• redhat build of keycloak (>= 26.4 < 26.4.10)
Related
Weakness · CWE (1)
- CWE-409 Improper Handling of Highly Compressed Data (Data Amplification) weakness
References
- https://access.redhat.com/errata/RHSA-2026:3947 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:3948 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:76128 access.redhat.com
- https://access.redhat.com/errata/RHSA-2026:76129 access.redhat.com
- https://access.redhat.com/errata/RHSA-2026:76130 access.redhat.com
- https://access.redhat.com/errata/RHSA-2026:76132 access.redhat.com
- https://access.redhat.com/errata/RHSA-2026:76134 access.redhat.com
- https://access.redhat.com/security/cve/CVE-2026-2575 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2440149 Issue Tracking, Vendor Advisory