CVE-2026-92856 · Runtime
NO FIX YET
Keycloak, acting as a SAML broker between an upstream identity provider and downstream services, does not honor ProxyRestrictions in incoming login messages. A user can therefore log into downstream services even when the upstream provider forbade sharing that login session.
first public Nov 6, 2026 · 1 source
Check it with your coding agent
It checks your repository and tells you if you’re affected, with the fix.
Only deployments where Keycloak sits between an upstream SAML identity provider and downstream services are relevant. Deployments that use Keycloak only as a direct identity provider, without SAML brokering, are not described as affected. The sources do not give the exact affected version range.
Not affected if direct-idp-only, no-saml-brokering
Who cares identity, keycloak, saml
kc.sh --version or the admin console footer; compare against the fixed versions in the product data, which the sources did not list.No fix yet, per the sources.
A flaw was found in the SAML brokering component of Keycloak, an identity and access management solution. The issue occurs when Keycloak acts as an intermediary between an upstream identity provider and downstream services. Keycloak fails to respect specific security instructions called ProxyRestrictions in the login messages it receives. This allows a user to log into downstream services even when the original identity provider explicitly forbade further sharing of the login session. As a result, users can bypass security boundaries intended to limit where their identity can be used.
This page as .md · .json · CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.