CVE-2025-11419
Fixed upstream EPSS <1%CVSS 7.5
A flaw was found in Keycloak. This vulnerability allows an unauthenticated remote attacker to cause a denial of service (DoS) by repeatedly initiating TLS 1.2 client-initiated renegotiation requests to exhaust server CPU resources, making the service unavailable.
Products: Red Hat build of Keycloak 26.0, Red Hat build of Keycloak 26.0.16, Red Hat build of Keycloak 26.2, Red Hat build of Keycloak 26.2.10
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Maven | org.keycloak:keycloak-quarkus-dist | 26.0.16 |
| Maven | org.keycloak:keycloak-quarkus-dist | 26.2.10 |
| Maven | org.keycloak:keycloak-quarkus-dist | 26.4.1 |