---
id: "CVE-2026-2092"
kind: "vulnerability"
aliases: ["CVE-2026-2092", "GHSA-794g-x443-36f7"]
title: "Keycloak: Unauthorized access via improper validation of encrypted SAML assertions"
severity: "high"
cvss: 7.7
epss: 0.00375
exploited: false
status: "open"
category: "runtime"
products: [{"name": "org.keycloak:keycloak-services", "fixed": [], "affected": "<= 26.2.5", "ecosystem": "maven"}, {"name": "org.keycloak:keycloak-services", "fixed": [], "affected": ">= 26.3.0, <= 26.4.7", "ecosystem": "maven"}, {"name": "org.keycloak:keycloak-services", "fixed": ["26.5.5"], "affected": ">= 26.5.0, < 26.5.5", "ecosystem": "maven"}, {"name": "redhat build of keycloak", "fixed": ["26.2.14"], "affected": ">= 26.2, < 26.2.14", "ecosystem": "vendor"}, {"name": "redhat build of keycloak", "fixed": ["26.4.10"], "affected": ">= 26.4, < 26.4.10", "ecosystem": "vendor"}]
ecosystems: ["maven", "vendor"]
tags: ["cwe-1287", "identity-brokering", "keycloak", "runtime", "saml", "self-hosted"]
not_affected_if: ["no-saml-identity-provider", "oidc-only", "signed-saml-responses-enforced"]
published_at: "2026-03-18T02:16:24+00:00"
first_seen_at: "2026-10-26T14:52:20+00:00"
updated_at: "2026-10-26T15:00:59+00:00"
sources: [{"source": "ghsa", "url": "https://github.com/advisories/GHSA-794g-x443-36f7", "first_seen_at": "2026-10-26T14:52:20+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-2092", "first_seen_at": "2026-10-26T15:00:59+00:00"}]
---

# Keycloak: Unauthorized access via improper validation of encrypted SAML assertions

Keycloak's SAML broker endpoint does not properly validate encrypted assertions when the overall SAML response is unsigned. An attacker holding one valid signed SAML assertion can craft a response with an injected encrypted assertion for another principal, gaining unauthorized access and possibly reading information.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- maven:org.keycloak:keycloak-services affected <= 26.2.5 fixed ?
- maven:org.keycloak:keycloak-services affected >= 26.3.0, <= 26.4.7 fixed ?
- maven:org.keycloak:keycloak-services affected >= 26.5.0, < 26.5.5 fixed 26.5.5
- vendor:redhat build of keycloak affected >= 26.2, < 26.2.14 fixed 26.2.14
- vendor:redhat build of keycloak affected >= 26.4, < 26.4.10 fixed 26.4.10

## How to check

- Check the Keycloak version with `kc.sh --version` or the admin console footer and compare it with the affected ranges.
- Look for SAML identity providers configured in the realm (Identity Providers, SAML v2.0) and confirm whether the broker accepts unsigned SAML responses.

## Fix

- Upgrade Keycloak to `26.5.5` on the 26.5 line.
- For 26.2.5 and earlier, and for 26.3.0 through 26.4.7, the sources do not name a fixed version: unknown.

## Timeline

- 2026-10-26T14:52:20+00:00 ghsa https://github.com/advisories/GHSA-794g-x443-36f7
- 2026-10-26T15:00:59+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-2092

## From the sources

A flaw was found in Keycloak. Keycloak's Security Assertion Markup Language (SAML) broker endpoint does not properly validate encrypted assertions when the overall SAML response is not signed. An attacker with a valid signed SAML assertion can exploit this by crafting a malicious SAML response. This allows the attacker to inject an encrypted assertion for an arbitrary principal, leading to unauthorized access and potential information disclosure.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_