Keycloak provides authorization services that allow administrators to restrict access to resources based on time policies (for example, only allowing access during business hours)

{
  "id": "97d2b310ece1f165624bea9751355ff84c14c7e805298eed5f94e4bf51d6c85e",
  "url": "https://osv.dev/vulnerability/CLEANSTART-2026-IG03697",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "Keycloak provides authorization services that allow administrators to restrict access to resources based on time policies (for example, only allowing access during business hours)",
    "summary": "Security vulnerability affects the keycloak package. Keycloak provides authorization services that allow administrators to restrict access to resources based on time policies (for example, only allowing access during business hours).",
    "evidence": "osv:CLEANSTART-2026-IG03697",
    "products": [
      {
        "name": {
          "value": "keycloak",
          "evidence": "/affected/0/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "26.7.2-r2",
            "evidence": "/affected/0/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "critical",
    "structured": {
      "id": "CLEANSTART-2026-IG03697",
      "aliases": [
        "CLEANSTART-2026-IG03697"
      ],
      "metrics": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "26.7.2-r2"
                }
              ]
            }
          ],
          "package": {
            "name": "keycloak",
            "purl": "pkg:apk/cleanstart/keycloak?arch=noarch",
            "ecosystem": "CleanStart"
          },
          "database_specific": {
            "source": "https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-IG03697.json"
          }
        }
      ],
      "modified": "2026-10-08T16:47:07.544748551Z",
      "provider": "osv",
      "upstream": [
        "CVE-2026-18572"
      ],
      "references": [
        "https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-IG03697.json",
        "https://osv.dev/vulnerability/CVE-2026-18572",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-18572"
      ],
      "provider_metadata": {}
    },
    "related_cves": [
      {
        "value": "CVE-2026-18572",
        "evidence": "/upstream"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 101899,
  "published_at": "2026-09-19T00:41:30.119+00:00"
}