CVE-2026-97176
Last modified
CVE-2026-97176 is a medium-severity vulnerability rated 4.2/10 on the CVSS scale. A flaw was found in the Level of Authentication enforcement mechanism of Keycloak, an identity and access management solution. The issue occurs when a client specifically requires a higher security level for a user who already has an active session at a lower level. EPSS estimates a 0.17% chance of exploitation in the next 30 days.
Description
A flaw was found in the Level of Authentication enforcement mechanism of Keycloak, an identity and access management solution. The issue occurs when a client specifically requires a higher security level for a user who already has an active session at a lower level. Due to a logic error in how session re-evaluations are handled, Keycloak may incorrectly issue a token at the lower security level instead of enforcing the required higher level, potentially allowing unauthorized access to sensitive resources that rely on these security claims.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat Build of Keycloak | All versions |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-97176?
How severe is CVE-2026-97176?
How do I fix CVE-2026-97176?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-97151mammoth (aka mammoth.js) before 1.12.2 is vulnerable to prot…8.4
- CVE-2026-97152Nanomsg versions 0.5-beta through 1.x before 1.2.3 has a rem…8.6
- CVE-2026-97155Fabasoft Folio Client before 2026, a locally installed compo…6.5
- CVE-2026-9716CWE-476 NULL Pointer Dereference vulnerability exists that c…7.5
- CVE-2026-97168Rejected reason: it is a suggestion
- CVE-2026-9717CWE-78 Neutralization of Special Elements used in an OS Comm…7.2
- CVE-2026-97177A flaw was found in the user update mechanism of the Keycloa…6.6
- CVE-2026-97179A security vulnerability has been detected in O2OA up to 9.5…4.3
- CVE-2026-9718CWE-617 Reachable Assertion vulnerability exists that could …6.5
- CVE-2026-97181GPM LIGHT developed by ezGlobal has a Sensitive Data Exposur…5.3
- CVE-2026-97182A security vulnerability has been detected in halo-dev Halo …7.3
- CVE-2026-97185A flaw was found in GIMP. When processing a specially crafte…7.8
Are you affected by CVE-2026-97176?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST