CVE-2026-3047
High
Description
A flaw was found in org.keycloak.broker.saml. When a disabled Security Assertion Markup Language (SAML) client is configured as an Identity Provider (IdP)-initiated broker landing target, it can still complete the login process and establish a Single Sign-On (SSO) session. This allows a remote attacker to gain unauthorized access to other enabled clients without re-authentication, effectively bypassing security restrictions.
SeverityHigh
CVSS8.8
Exploit probability—
Product
Redhat Keycloak
PublishedMar 5, 2026
First seenMar 5, 2026
Weakness typeCWE-305CWE-305
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat keycloak | No range specified | — |
| redhat build_of_keycloak | No range specified, 26.2, 26.2.14, 26.4, 26.4.10 | — |
| org.keycloak:keycloak-broker-samlMaven | v ≤ 1.8.1.Final | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.