CVE-2026-1035
Last modified
CVE-2026-1035 is a low-severity vulnerability rated 3.1/10 on the CVSS scale. A flaw was found in the Keycloak server during refresh token processing, specifically in the TokenManager class responsible for enforcing refresh token reuse policies. When strict refresh token rotation is enabled, the validation and update of refresh token usage are not performed atomically. EPSS estimates a 0.28% chance of exploitation in the next 30 days.
Description
A flaw was found in the Keycloak server during refresh token processing, specifically in the TokenManager class responsible for enforcing refresh token reuse policies. When strict refresh token rotation is enabled, the validation and update of refresh token usage are not performed atomically. This allows concurrent refresh requests to bypass single-use enforcement and issue multiple access tokens from the same refresh token. As a result, Keycloak’s refresh token rotation hardening can be undermined.
Metrics
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-1035?
How severe is CVE-2026-1035?
How do I fix CVE-2026-1035?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-10300A security vulnerability has been detected in SGLang 0.5.10.…3.7
- CVE-2026-10301A vulnerability was detected in itsourcecode Fees Management…4.3
- CVE-2026-10302A flaw has been found in itsourcecode Fees Management System…6.3
- CVE-2026-10303In ServerCo getssl version 2.49 and prior, the ACME challeng…7.4
- CVE-2026-10305Out-of-bounds read vulnerability in Samsung Open Source rlot…6.1
- CVE-2026-1032The Conditional Menus plugin for WordPress is vulnerable to …4.3
- CVE-2026-1036The Photo Gallery by 10Web – Mobile-Friendly Image Gallery p…5.3
- CVE-2026-1042The WP Hello Bar plugin for WordPress is vulnerable to Store…4.4
- CVE-2026-1043The PostmarkApp Email Integrator plugin for WordPress is vul…4.4
- CVE-2026-1044The Tennis Court Bookings plugin for WordPress is vulnerable…4.4
- CVE-2026-1045The Viet contact plugin for WordPress is vulnerable to Store…4.4
- CVE-2026-1046Mattermost Desktop App versions <=6.0 6.2.0 5.2.13.0 fail to…6.5
Are you affected by CVE-2026-1035?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST