PT-2026-29730 · Red Hat · Keycloak

Ngọc Chung Kim · Published 2026-04-02 · Updated 2026-04-02 · CVE-2026-4325

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Keycloak (affected versions not specified)

Description A flaw exists in Keycloak where the SingleUseObjectProvider, a global key-value store, lacks proper type and namespace isolation. This allows an attacker to delete arbitrary single-use entries, potentially enabling the replay of consumed action tokens like password reset links. Successful exploitation could lead to unauthorized access or account compromise.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-653

Related Identifiers

CVE-2026-4325

GHSA-RX66-HJ7G-28H7

Affected Products

Keycloak

References · 12

• https://osv.dev/vulnerability/GHSA-rx66-hj7g-28h7 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:6475 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:6477 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:6476 · Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2026-4325 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2448351 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:6478 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-4325 · Security Note
• https://github.com/keycloak/keycloak · Note
• https://github.com/keycloak/keycloak/issues/47715 · Note
• https://github.com/keycloak/keycloak/commit/9046f201125a6fd6be9c116b99d348509d99d4a5 · Note
• https://twitter.com/CVEnew/status/2039744360628060234 · Twitter Post