---
id: "CVE-2026-92856"
page: "https://infrastack.ai/live/CVE-2026-92856"
kind: "vulnerability"
aliases: ["CVE-2026-92856"]
title: "Keycloak: SAML brokering ignores ProxyRestrictions, letting users reach forbidden services"
severity: "medium"
cvss: 4.9
epss: null
exploited: false
status: "open"
category: "runtime"
products: []
ecosystems: []
tags: ["identity", "keycloak", "runtime", "saml"]
not_affected_if: ["direct-idp-only", "no-saml-brokering"]
published_at: "2026-11-06T06:16:44+00:00"
first_seen_at: "2026-11-06T06:40:12+00:00"
updated_at: "2026-11-06T06:41:39+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-92856", "first_seen_at": "2026-11-06T06:40:12+00:00"}]
exploit_sources: []
---

# Keycloak: SAML brokering ignores ProxyRestrictions, letting users reach forbidden services

Link for people: https://infrastack.ai/live/CVE-2026-92856 (this .md is for agents)

Keycloak, acting as a SAML broker between an upstream identity provider and downstream services, does not honor ProxyRestrictions in incoming login messages. A user can therefore log into downstream services even when the upstream provider forbade sharing that login session.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check whether your Keycloak deployment brokers SAML identity providers (Identity Providers settings with a SAML provider).
- Check your Keycloak version with `kc.sh --version` or the admin console footer; compare against the fixed versions in the product data, which the sources did not list.

## Timeline

- 2026-11-06T06:40:12+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-92856

## From the sources

A flaw was found in the SAML brokering component of Keycloak, an identity and access management solution. The issue occurs when Keycloak acts as an intermediary between an upstream identity provider and downstream services. Keycloak fails to respect specific security instructions called ProxyRestrictions in the login messages it receives. This allows a user to log into downstream services even when the original identity provider explicitly forbade further sharing of the login session. As a result, users can bypass security boundaries intended to limit where their identity can be used.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_