SAML Identity Broker Vulnerability in Keycloak by Red Hat
CVE-2026-92855

7.4HIGH

Key Information:

Vendor

Red Hat
Status
Red Hat Build Of Keycloak
Red Hat Single Sign-on 7
Vendor
CVE Published:
5 November 2026

What is CVE-2026-92855?

A security issue has been identified in the SAML identity broker component of Keycloak, a tool utilized to delegate authentication to various external identity providers. The flaw lies in the broker's failure to verify that users possess the private key associated with a holder-of-key assertion. As a result, an attacker who intercepts a signed assertion from a victim can replay it, gaining unauthorized access and potentially impersonating the victim without needing to possess their private key. This vulnerability underscores the importance of key validation in authentication processes.

References

https://access.redhat.com/security/cve/CVE-2026-92855
vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2535814
issue-trackingx_refsource_REDHAT

CVSS V3.1

Score:
7.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Red Hat would like to thank yd1ng for reporting this issue.
.