← All credits

Red Hat would like to thank Adam Korczynski (Ada Logics Ltd) and Anthropic for reporting this issue.

1 vulnerability record and advisories credit this contributor.

CVE-2026-107124
Keycloak-services: keycloak-services: oidc logout endpoint session fixation via id_token_hint leading to account takeover