CVEvulnerability
CVE-2026-3872
7.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2026-04-02
- Last modified
- 2026-10-26
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.3 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
- CVSS 3.1 (0b0ca135-0b70-47e7-9f44-1890c2a1c46c)
- 7.3 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
- Weaknesses
- CWE-601
Description
A flaw was found in Keycloak. This issue allows an attacker, who controls another path on the same web server, to bypass the allowed path in redirect Uniform Resource Identifiers (URIs) that use a wildcard. A successful attack may lead to the theft of an access token, resulting in information disclosure.
Affected configurations
• redhat build of keycloak
• redhat build of keycloak 26.2
• redhat build of keycloak 26.2.15
• redhat build of keycloak 26.4
• redhat build of keycloak 26.4.11
Related
Weakness · CWE (1)
- CWE-601 URL Redirection to Untrusted Site weakness
References
- https://access.redhat.com/errata/RHSA-2026:6475 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:6476 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:6477 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:6478 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-3872 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2445988 Issue Tracking, Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:6475 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:6476 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:6477 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:6478 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-3872 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2445988 Issue Tracking, Vendor Advisory
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3872.json security.access.redhat.com