CVE record · 1 source
CVE-2026-105305
CVSS 5.4A flaw was found in the OIDC implementation of Keycloak, specifically within the Device Authorization Grant flow.
- Vendor
- Red Hat
- Product
- Keycloak / Single Sign-On, Java libraries / app servers, Open-source identity providers
- CVSS
- 5.4
- Exposure class
- Identity, Web platform
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
A flaw was found in the OIDC implementation of Keycloak, specifically within the Device Authorization Grant flow.
A flaw was found in the OIDC implementation of Keycloak, specifically within the Device Authorization Grant flow. This component allows devices with limited input capabilities to obtain security tokens. The issue occurs because…