RHSA-2026:96039: Important: Red Hat build of Keycloak 26.6.9 Images Security Update
Important: Red Hat build of Keycloak 26.6.9 Images Security Update
Other sources
Red Hat build of Keycloak is an integrated sign-on solution,available as a Red Hat JBoss Middleware for OpenShift containerizedimage. The Red Hat build of Keycloak for OpenShift image providesan authentication server that you can use to log in centrally, logout, and register. You can also manage user accounts for webapplications, mobile applications, and RESTful web services.Red Hat build of Keycloak Operator for OpenShift simplifiesdeployment and management of Keycloak 26.6.9 clusters.This erratum releases new images for Red Hat build of Keycloak26.6.9 for use within the OpenShift Container Platform cloudcomputing Platform-as-a-Service (PaaS) for on-premise or privatecloud deployments, aligning with the standalone product release.Security fixes: SAML redirect binding signature bypass via percent-encoded parameter names (CVE-2026-117691)
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Red Hat build of Keycloakto a version that resolves this vulnerability.Fixed in 26.6.9 - Operational
Before applying the update, back up the existing installation, including all applications, configuration files, databases, and database settings.