CVE-2026-9704 | Keycloak on Red Hat JSON Web Token subject_token improper validation of specified quantity in input

A vulnerability was found in Keycloak on Red Hat and classified as problematic. Affected by this vulnerability is an unknown functionality of the component JSON Web Token Handler. Executing a manipulation of the argument subject_token can lead to improper validation of specified quantity in input.

The identification of this vulnerability is CVE-2026-9704. The attack may be launched remotely. There is no exploit available.