Keycloak Vulnerability Allows Unauthorized Access and Privilege Escalation
CVE-2026-4282

7.4HIGH

Key Information:

Vendor: Red Hat
Status: Red Hat Build Of Keycloak 26.2; Red Hat Build Of Keycloak 26.2.15; Red Hat Build Of Keycloak 26.4; Red Hat Build Of Keycloak 26.4.11
Vendor: CVE Published:; 2 April 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-4282?

A vulnerability has been identified in Keycloak involving the SingleUseObjectProvider, a global key-value store. This flaw allows an unauthenticated attacker to exploit the system by forging authorization codes. If successfully exploited, it could lead to the creation of admin-level access tokens, granting the attacker elevated privileges and the ability to perform sensitive operations within the system.

Affected Version(s)

Red Hat build of Keycloak 26.2 26.2.15-1

Red Hat build of Keycloak 26.2 26.2-18

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-4282-Scanner
Created by hexissam