Skip to content
Sign in
7.5 High

CVE-2025-11419 A flaw was found in Keycloak

Description

A flaw was found in Keycloak. This vulnerability allows an unauthenticated remote attacker to cause a denial of service (DoS) by repeatedly initiating TLS 1.2 client-initiated renegotiation requests to exhaust server CPU resources, making the service unavailable.

Affected products and versions

Product Affected versions Fixed in
Red Hat build of Keycloak 26.0 26.0 earliest → < 26.0-21 26.0-21
Red Hat build of Keycloak 26.0.16 Versions not published
Red Hat build of Keycloak 26.2 26.2 earliest → < 26.2-11 26.2-11
Red Hat build of Keycloak 26.2.10 Versions not published

Other CVEs of Red Hat build of Keycloak 26.0

The 16 CVEs of Red Hat build of Keycloak 26.0 →
CVE-2025-10044 A flaw was found in Keycloak 4.3 Medium CVE-2025-9162 A flaw was found in org.keycloak/keycloak-model-storage-service 4.9 Medium CVE-2025-8419 A vulnerability was found in Keycloak-services 5.3 Medium CVE-2025-7365 A flaw was found in Keycloak 7.1 High
Track this CVE