Vulnerability details
CVE-2026-3872
Keycloak: keycloak: information disclosure due to redirect_uri validation bypass
CVSS 3.1
7.3High
Official description
A flaw was found in Keycloak. This issue allows an attacker, who controls another path on the same web server, to bypass the allowed path in redirect Uniform Resource Identifiers (URIs) that use a wildcard. A successful attack may lead to the theft of an access token, resulting in information disclosure.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 7.3High | 3.1 | CVEProject cvelistV5 (CNA) (redhat) | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N |
| 7.3High | 3.1 | CVEProject cvelistV5 (CNA) (redhat-SADP) | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| No product information recorded. | |||
References and advisories
7- https://access.redhat.com/security/cve/CVE-2026-3872 vdb-entryx_refsource_REDHAT
- https://bugzilla.redhat.com/show_bug.cgi?id=2445988 issue-trackingx_refsource_REDHAT
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3872.json x_sadp-csaf-vex
- https://access.redhat.com/errata/RHSA-2026:6476 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:6478 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:6475 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:6477 vendor-advisoryx_refsource_REDHAT
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2026-04-02
- Last updated
- 2026-07-15
- State
- Published
- Assigner (CNA)
- redhat
Exploit prediction (EPSS)
0.44%
Probability of exploitation in 30 days
39.1%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- No
- Exploitation
- None
- Technical impact
- Total
Weaknesses (CWE)
- CWE-601URL Redirection to Untrusted Site ('Open Redirect')