PT-2026-7129 · Red Hat · Keycloak

Gwthr + 2 · Published 2026-02-09 · Updated 2026-03-10 · CVE-2026-1529

Positive Technologies · (AI Summary)

CVSS v2.0

8.5

High

AV:N/AC:L/Au:S/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions Keycloak (affected versions not specified)

Description A flaw exists in Keycloak’s invitation token registration mechanism. The server does not verify the cryptographic signature of the JSON Web Token (JWT). An attacker can modify the organization ID (org id) and target email within a legitimate invitation token’s JWT payload to register an account in an unauthorized organization. This can lead to unauthorized access, bypassing invite-only onboarding, access to resources through Single Sign-On (SSO), and potential privilege escalation through Role-Based Access Control (RBAC).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Verification of Cryptographic Signature

Weakness Enumeration

CWE-347

Related Identifiers

BDU:2026-01704

CVE-2026-1529

GHSA-HCVW-475W-8G7P

Affected Products

Keycloak

References · 32

• 🔥 https://github.com/ninjazan420/CVE-2026-1529-PoC-keycloak-unauthorized-registration-via-improper-invitation-token-validation · Exploit
• https://access.redhat.com/errata/RHSA-2026:2365 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:2363 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:2366 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-1529 · Security Note
• https://bdu.fstec.ru/vul/2026-01704 · Security Note
• https://osv.dev/vulnerability/GHSA-hcvw-475w-8g7p · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:2364 · Vendor Advisory
• https://github.com/keycloak/keycloak · Note
• https://github.com/keycloak/keycloak/commit/82cd7941d1dd28fa14a67a6e6b912301f1a5e1a1 · Note
• https://github.com/keycloak/keycloak/commit/b2519756487b519f95c07aa8b10afe003e492119 · Note
• https://github.com/keycloak/keycloak/issues/46145 · Note
• https://github.com/keycloak/keycloak/commit/8fc9a98026106a326f4faa98d4c9a48341ace2d7 · Note
• https://github.com/keycloak/keycloak/pull/46155 · Note
• https://t.me/proxy_bar/3129 · Telegram Post