← All credits

Red Hat would like to thank Mohamed Amine ait Ouchebou (mrecho) (Indiesecurity) for reporting this issue.

1 vulnerability record and advisories credit this contributor.

CVE-2026-1035
Org.keycloak.protocol.oidc: keycloak refresh token reuse bypass via toctou race condition