RHSA-2026:50846Vendor advisory
https://access.redhat.com/errata/RHSA-2026:50846 CVE-2026-16071
MEDIUM
Keycloak-services: keycloak-services: ldap entry-dn user search bypasses configured users dn boundary
Record summary
CVE-2026-16071 has a selected CVSS score of 5.4 (medium).
Description
A flaw was found in the LDAP storage provider of Keycloak, which is used to federate user identities from external directories. The issue occurs when a delegated administrator performs a search using a specific LDAP entry Distinguished Name (DN). Due to missing validation, the system allows lookups for users located outside the configured search boundary, leading to the disclosure of account information from unauthorized parts of the directory and unintended importing of those users into local storage.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Aug 6, 2026 · Source: CVE List
Affected products and versions
Showing 12 of 14| Product | Source | Version range | Status |
|---|---|---|---|
Default status: unaffected | CVE List | Version data not supplied | |
Red Hat JBoss Enterprise Application Platform Expansion PackBrowse Red Hat / Red Hat JBoss Enterprise Application Platform Expansion Packkeycloak-servicesDefault status: unaffected | CVE List | Version data not supplied | |
Default status: unaffected | CVE List | Version data not supplied | |
Red Hat build of Keycloak 26.4Browse Red Hat / Red Hat build of Keycloak 26.4rhbk/keycloak-operator-bundleDefault status: affected | CVE List | 26.4.14-1 to < * | unaffected |
Default status: affected | CVE List | 26.4-22 to < * | unaffected |
Red Hat build of Keycloak 26.4Browse Red Hat / Red Hat build of Keycloak 26.4rhbk/keycloak-rhel9-operatorDefault status: affected | CVE List | 26.4-22 to < * | unaffected |
Red Hat build of Keycloak 26.4.14Browse Red Hat / Red Hat build of Keycloak 26.4.14keycloak-servicesDefault status: unaffected | CVE List | Version data not supplied | |
Red Hat build of Keycloak 26.4.14Browse Red Hat / Red Hat build of Keycloak 26.4.14rhbk-openshift-rhel9/rhbk-openshift-rhel9Default status: unaffected | CVE List | Version data not supplied | |
Red Hat build of Keycloak 26.6Browse Red Hat / Red Hat build of Keycloak 26.6rhbk/keycloak-operator-bundleDefault status: affected | CVE List | 26.6.5-1 to < * | unaffected |
Default status: affected | CVE List | 26.6-11 to < * | unaffected |
Red Hat build of Keycloak 26.6Browse Red Hat / Red Hat build of Keycloak 26.6rhbk/keycloak-rhel9-operatorDefault status: affected | CVE List | 26.6-11 to < * | unaffected |
Default status: unaffected | CVE List | Version data not supplied | |
References
7RHSA-2026:50847Vendor advisory
https://access.redhat.com/errata/RHSA-2026:50847 RHSA-2026:50848Vendor advisory
https://access.redhat.com/errata/RHSA-2026:50848 RHSA-2026:50849Vendor advisory
https://access.redhat.com/errata/RHSA-2026:50849 access.redhat.comvdb entry
https://access.redhat.com/security/cve/CVE-2026-16071 RHBZ#2501720issue tracking
https://bugzilla.redhat.com/show_bug.cgi?id=2501720 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2026-16071