SAML XML Processing Flaw in Keycloak Identity Management Solution

CVE-2026-107123

What is CVE-2026-107123?

A vulnerability has been identified in the SAML XML processing component of Keycloak, an open-source identity and access management tool. This issue is triggered during the parsing of XML documents that contain excessively long dateTime or duration values, which are inadequately validated prior to processing. As a result, the XML parser may experience heightened CPU consumption, allowing an unauthenticated remote attacker to exploit this flaw. By sending specifically crafted SAML requests, the attacker can potentially lead to elevated CPU usage and denial of service for all users interacting with the affected Keycloak server.

References