A vulnerability was found in Keycloak up to 26. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Proxy Header Handler. The manipulation leads to denial of service.

This vulnerability is known as CVE-2024-9666. The attack can only be initiated within the local network. There is no exploit available.