CVE-2026-47426

Name of the Vulnerable Software and Affected Versions Open Access Management (OpenAM) versions prior to 16.1.1

Description An improper authentication issue exists in the private key jwt client authentication path. The system uses ClientJwksResolverCache without reliably binding a cached jwks uri resolver and verified assertion to the expected clientID in ClientCredentialsReader. This allows an attacker who controls any registered client with published keys, including those obtained via open dynamic registration, to authenticate as another client whose keys are exposed through jwks uri. Consequently, the attacker can mint tokens in that client's name across realms within the same OpenAM process.

Recommendations Update to version 16.1.1.