CVE-2026-117691

Name of the Vulnerable Software and Affected Versions Keycloak (affected versions not specified) Red Hat Build of Keycloak (affected versions not specified)

Description A flaw exists in the SAML HTTP-Redirect binding implementation. The server processes percent-encoded parameter names, such as %53AMLResponse, while the signature verification logic only validates literal parameter names. This discrepancy allows an unauthenticated attacker to provide a crafted, unsigned SAML message that the server processes instead of a legitimately signed one. This can lead to full account takeover of federated users through authentication assertion spoofing.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.