Moderate severity6.4NVD Advisory· Published Nov 5, 2026
keycloak-services: keycloak-services: DCR azp and sid claim substitution allows Account REST session takeover
CVE-2026-97367
Description
keycloak-services: keycloak-services: DCR azp and sid claim substitution allows Account REST session takeover
Affected products
1Patches
Vulnerability mechanics
News mentions
0No linked articles in our index yet.