Skip to content
Red HatCVE-2026-16442

Red Hat SAML broker: origin validation error

High7.4CVE-2026-16442 · Published Aug 5, 2026 · updated Aug 10, 2026

A flaw was found in the SAML broker component of Keycloak, which is used to manage identity federation and user authentication. The issue occurs because the IdP-initiated Single Sign-On endpoint fails to check if a provider is restricted to account linking only. This allows an attacker with control over a linked upstream identity to bypass login restrictions and gain full access to a local user account.

Red Hat advisory

Affected versions

PackageAffectedFixed in
Red Hat Data Grid 8
Product
all versionsNo fix yet
Red Hat build of Keycloak 26.4.14
Product
all versionsNo fix yet
all versionsNo fix yet
Red Hat build of Keycloak 26.6.5
Product
all versionsNo fix yet
all versionsNo fix yet
all versionsNo fix yet
Details and references

More Red Hat advisories

All Red Hat
Advisory
Red Hat Enterprise Linux 10: integer overflow
Low2.2Aug 5
Red Hat RPM: buffer overflow
Medium5.5Aug 5
Red Hat OpenShift Container Platform 4: authentication bypass
Medium6.5Aug 5
Red Hat Keycloak: type confusion
High8.8Aug 5
Red Hat LDAP storage provider of Keycloak: improper privilege management
Medium5.4Aug 5
Red Hat user-event metrics recording of Keycloak.: resource exhaustion
Medium6.5Aug 5

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.

Double opt-in. Unsubscribe any time.