CVE-2026-1035 | Red Hat Keycloak Refresh Token TokenManager toctou

A vulnerability described as problematic has been identified in Red Hat Keycloak. Affected by this vulnerability is the function TokenManager of the component Refresh Token Handler. The manipulation results in time-of-check time-of-use.

This vulnerability is cataloged as CVE-2026-1035. The attack may be launched remotely. There is no exploit available.