PT-2026-29729 · Red Hat · Keycloak

Bzimport · Published 2026-04-02 · Updated 2026-04-07 · CVE-2026-4282

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Keycloak (affected versions not specified)

Description A flaw exists in Keycloak where the SingleUseObjectProvider, a global key-value store, lacks proper type and namespace isolation. This allows an unauthenticated attacker to forge authorization codes, potentially leading to the creation of admin-capable access tokens and privilege escalation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Weakness Enumeration

CWE-653

Related Identifiers

CVE-2026-4282

GHSA-HJ93-H7PG-FH6V

Affected Products

Keycloak

References · 13

• https://access.redhat.com/security/cve/CVE-2026-4282 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2448061 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:6476 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-hj93-h7pg-fh6v · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:6475 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-4282 · Security Note
• https://access.redhat.com/errata/RHSA-2026:6478 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:6477 · Vendor Advisory
• https://github.com/keycloak/keycloak · Note
• https://github.com/keycloak/keycloak/commit/9046f201125a6fd6be9c116b99d348509d99d4a5 · Note
• https://github.com/keycloak/keycloak/issues/47719 · Note
• https://twitter.com/RedHornet_Intel/status/2041483815470748074 · Twitter Post
• https://twitter.com/CVEnew/status/2039744361580138622 · Twitter Post