【高危】keycloak-services：信息泄露风险（GHSA-794g-x443-36f7）

安全情报快照 · 风险级别：高危 · CVSS：7.7 · CVE-2026-2092 · GHSA-794g-x443-36f7

先看结论

keycloak-services存在信息泄露风险，<= 26.2.5 受影响。上游暂未提供明确修复版本。

影响范围

处置建议

上游公告暂未给出明确修复版本。请持续关注项目维护者发布的补丁，并结合受影响版本范围排查资产。

上游技术详情（原文）

Keycloak's SAML broker endpoint does not properly validate encrypted assertions when the overall SAML response is not signed. An attacker with a valid signed SAML assertion can exploit this by crafting a malicious SAML response, injecting an encrypted assertion for an arbitrary principal, leading to unauthorized access and potential information disclosure.

来源与许可

• GitHub Advisory GHSA-794g-x443-36f7
• https://github.com/keycloak/keycloak/security/advisories/GHSA-794g-x443-36f7
• https://nvd.nist.gov/vuln/detail/CVE-2026-2092
• https://github.com/keycloak/keycloak/pull/46929
• https://github.com/keycloak/keycloak/commit/b40a25908d937bb0563ea516487bc2c7c1d92508
• https://access.redhat.com/errata/RHSA-2026:3925
• https://access.redhat.com/errata/RHSA-2026:3926
• https://access.redhat.com/errata/RHSA-2026:3947
• https://access.redhat.com/errata/RHSA-2026:3948
• https://access.redhat.com/security/cve/CVE-2026-2092
• https://bugzilla.redhat.com/show_bug.cgi?id=2437296
• https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2092.json

本页自动同步 GitHub Advisory Database 的公开数据，并保留上游原文供核验；不宣称原创分析。数据许可：CC-BY-4.0。