CVEvulnerability

CVE-2026-3047

8.8 HIGH Published 2026-03-05 Modified 2026-07-15 Official page ↗
Status
Modified
Published
2026-03-05
Last modified
2026-07-15
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 (0b0ca135-0b70-47e7-9f44-1890c2a1c46c)
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-305

Description

A flaw was found in org.keycloak.broker.saml. When a disabled Security Assertion Markup Language (SAML) client is configured as an Identity Provider (IdP)-initiated broker landing target, it can still complete the login process and establish a Single Sign-On (SSO) session. This allows a remote attacker to gain unauthorized access to other enabled clients without re-authentication, effectively bypassing security restrictions.

Affected configurations

• redhat build of keycloak • redhat build of keycloak 26.2 • redhat build of keycloak 26.2.14 • redhat build of keycloak 26.4 • redhat build of keycloak 26.4.10 • redhat keycloak

Related

Weakness · CWE (1)

  • CWE-305 Authentication Bypass by Primary Weakness weakness

References