CVE-2026-103884

Published: Oct 1, 2026Modified: Nov 6, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H

Exploitability: 2.2 / Impact: 4.2

Source: secalert@redhat.com (Secondary)

Description

A flaw was found in the X.509 client certificate authenticator of Keycloak. When CRL Distribution Point checking is enabled, the server fails to properly validate the file paths provided in a client certificate. An attacker can provide a specially crafted certificate that causes the server to attempt to read sensitive files from the local system or exhaust memory by loading extremely large files, potentially leading to information disclosure or a system crash.

Related CWEs

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References (3)

https://access.redhat.com/errata/RHSA-2026:95761

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2026:95762

Source: secalert@redhat.com

https://access.redhat.com/security/cve/CVE-2026-103884

Source: secalert@redhat.com

Timeline

No history available yet.