Moderate severity6.4NVD Advisory· Published Nov 5, 2026
keycloak-services: keycloak-services: OIDC logout endpoint session fixation via id_token_hint leading to account takeover
CVE-2026-107124
Description
keycloak-services: keycloak-services: OIDC logout endpoint session fixation via id_token_hint leading to account takeover
Affected products
1Patches
Vulnerability mechanics
News mentions
0No linked articles in our index yet.