CVE-2026-19729

Name of the Vulnerable Software and Affected Versions Red Hat Build of Keycloak (affected versions not specified)

Description A flaw exists in the key provider component of the keycloak-services library, which serves as the core engine for the Red Hat Build of Keycloak. Due to an incomplete fix for path probing, a realm administrator can submit arbitrary filesystem paths as keystore parameters. This allows an attacker to verify the existence and readability of files on the server, which may lead to the exposure of sensitive system information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.