PT-2025-34237 · Unknown+1 · Keycloak-Model-Storage-Service+1

Published 2025-08-21 · Updated 2025-10-10 · CVE-2025-9162

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: org.keycloak/keycloak-model-storage-service (affected versions not specified)

Description: A flaw exists in the KeycloakRealmImport custom resource, which substitutes placeholders within imported realm documents, referencing environment variables. This substitution process allows for injection attacks when crafted realm documents are processed, potentially enabling an attacker to inject malicious content during the realm import procedure.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-526

Related Identifiers

CVE-2025-9162

ECHO-A489-FFE0-F1D7

GHSA-8HXP-QMPH-W5GQ

GHSA-W2WJ-HW98-233H

Affected Products

Keycloak

Keycloak-Model-Storage-Service

References · 21

• https://access.redhat.com/errata/RHSA-2025:15336 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2025:15338 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2025:15337 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2025:16399 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2025:15339 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2025:16400 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-8hxp-qmph-w5gq · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-w2wj-hw98-233h · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-9162 · Security Note
• https://github.com/keycloak/keycloak · Note
• https://github.com/keycloak/keycloak/blob/26.3.3/model/storage-services/src/main/java/org/keycloak/exportimport/AbstractFileBasedImportProvider.java#L36 · Note
• https://github.com/keycloak/keycloak/blob/75afda410495a9576e00edc3277ab42ca155f806/model/storage-services/src/main/java/org/keycloak/exportimport/AbstractFileBasedImportProvider.java#L35 · Note
• https://github.com/keycloak/keycloak/security/advisories/GHSA-8hxp-qmph-w5gq · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9162 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=2389396 · Note