CVE-2026-15573

Analyzed Analyzed - Analysis Complete

Keycloak Authorization Services Path Normalization Flaw

Publication date: 2026-08-05

Last updated on: 2026-08-20

Assigner: redhat-SADP

Description

A flaw was found in Keycloak's Authorization Services. The component responsible for matching request paths to security policies (PathMatcher) does not properly normalize URIs before comparison. By adding extra characters like a trailing slash or matrix parameters to a URL, an attacker can trick the system into applying a less restrictive security policy than intended. This allows an authenticated user to access administrative or restricted areas they should not have permission to see.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-05

Last Modified

2026-08-20

Generated

2026-08-25

AI Q&A

2026-08-05

EPSS Evaluated

2026-08-24

NVD

CVE-2026-15573

EUVD

EUVD-2026-53381

Affected Vendors & Products

Vendor	Product	Version / Range
redhat	single_sign-on	7.0
redhat	data_grid	8.0
redhat	jboss_enterprise_application_platform_expansion_pack	*
redhat	build_of_keycloak	From 26.4 (inc) to 26.4.14 (exc)
redhat	build_of_keycloak	From 26.6 (inc) to 26.6.5 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-178	The product does not properly account for differences in case sensitivity when accessing or determining the properties of a resource, leading to inconsistent results.

Attack-Flow Graph

Executive Summary

This vulnerability is in Keycloak's Authorization Services. The PathMatcher component fails to properly normalize URIs before comparing them to security policies. Attackers can exploit this by adding characters like trailing slashes or matrix parameters to URLs to bypass intended access restrictions.

Detection Guidance

To detect this vulnerability, inspect Keycloak logs for unusual URI access patterns, particularly requests with trailing slashes or matrix parameters (e.g., /admin/;x=1) that bypass intended security policies. Check if PathMatcher incorrectly matches broader resources instead of restricted ones.

Impact Analysis

An authenticated user could exploit this flaw to access administrative or restricted areas they should not have permission to see. This could lead to unauthorized data access, privilege escalation, or other security breaches depending on the system's configuration.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating compliance requirements for GDPR, HIPAA, and other regulations. It may result in data breaches, legal penalties, and loss of trust due to inadequate access controls.

Mitigation Strategies

Update Keycloak to the latest version that fixes this PathMatcher flaw. Review and tighten authorization policies to ensure proper URI matching. Test policies to confirm they block unauthorized access attempts with modified URIs.

Hi! I’m here to help you understand CVE-2026-15573. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70