CVE-2026-2092 | Keycloak Encrypted SAML Assertion improper authorization

A vulnerability described as critical has been identified in Keycloak. This affects an unknown function of the component Encrypted SAML Assertion. Such manipulation leads to improper authorization.

This vulnerability is traded as CVE-2026-2092. The attack may be launched remotely. There is no exploit available.