StackRadarChart IndexLive demo

CVE-2026-7507

High

Advisory

Published 19 May 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.008; 53rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 24; of 17,926 indexed, latest versions
Container images: 21; deployed by those charts
Fix available: 1 of 1; affected package

Keycloak: Session fixation in OIDC login flow that can lead to account takeover

Carried by container images the latest versions of 24 of 17,926 indexed charts deploy, on 21 images.

Affected package	Affected versions	Fixed in	Images
keycloak-servicesmaven	14.0.0, 17.0.1, 19.0.3, 20.0.1+15 more	26.6.2	21

OSV records: GHSA-hf67-5vvq-fm3r
Also known as: BIT-keycloak-2026-7507

Charts affected

24 by stars

Chart

Latest

Affected images

Radar Score

keycloakcodecentric

1 of 3 See more

keycloak codecentric 18.10.0

1 of the 3 container images this version deploys carry CVE-2026-7507.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :17.0.1-legacy	68f9f38c8f30	keycloak-services@17.0.1	26.6.2

Open the chart page →

7,848

musicocielmusicociel

1 of 3 See more

musicociel musicociel 0.0.0

1 of the 3 container images this version deploys carry CVE-2026-7507.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :23.0.3	4f72a5b0c076	keycloak-services@23.0.3	26.6.2

Open the chart page →

4,569

cosmocosmo-platform

1 of 10 See more

cosmo cosmo-platform 0.20.0

1 of the 10 container images this version deploys carry CVE-2026-7507.

Container image	Digest	Package	Fixed in
ghcr.io/wundergraph/cosmo/keycloak :0.13.0	b37408461b9b	keycloak-services@26.5.4	26.6.2

Open the chart page →

30,656

1 of 12 See more

clowder2 ncsa 1.9.7

1 of the 12 container images this version deploys carry CVE-2026-7507.

Container image	Digest	Package	Fixed in
bitnamilegacy/keycloak :20.0.5	cb04e49e6eb1	keycloak-services@20.0.5	26.6.2

Open the chart page →

39,063

keycloakaccount-service

1 of 2 See more

keycloak account-service 18.4.5

1 of the 2 container images this version deploys carry CVE-2026-7507.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :17.0.1-legacy	68f9f38c8f30	keycloak-services@17.0.1	26.6.2

Open the chart page →

7,848

arlas-aiasarlas-stack

1 of 22 See more

arlas-aias arlas-stack 28.9.0

1 of the 22 container images this version deploys carry CVE-2026-7507.

Container image	Digest	Package	Fixed in
bitnamilegacy/keycloak :26.3.3-debian-12-r0	da3df0976a9f	keycloak-services@26.3.3	26.6.2

Open the chart page →

41,515

idmassist-iot-identity-manager

1 of 2 See more

idm assist-iot-identity-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-7507.

Container image	Digest	Package	Fixed in
assistiot/identity-manager_kc :latest	0df4b4fa899a	keycloak-services@19.0.3	26.6.2

Open the chart page →

13,723

keycloakbarravar

1 of 1 See more

keycloak barravar 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-7507.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :24.0.3	4d6f22991266	keycloak-services@24.0.3	26.6.2

Open the chart page →

2,542

keycloakbhuwanupadhyay

1 of 2 See more

keycloak bhuwanupadhyay 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-7507.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0.2	5227edcc7595	keycloak-services@20.0.2	26.6.2

Open the chart page →

6,614

damap-chartdamap

1 of 5 See more

damap-chart damap 0.3.1

1 of the 5 container images this version deploys carry CVE-2026-7507.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :26.5	45ae20191531	keycloak-services@26.5.7	26.6.2

Open the chart page →

14,201

drogue-cloud-coredrogue-iot

1 of 22 See more

drogue-cloud-core drogue-iot 0.7.11

1 of the 22 container images this version deploys carry CVE-2026-7507.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0	054ef67eb7da	keycloak-services@20.0.5	26.6.2

Open the chart page →

57,476

drogue-cloud-twindrogue-iot

1 of 8 See more

drogue-cloud-twin drogue-iot 0.7.11

1 of the 8 container images this version deploys carry CVE-2026-7507.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0	054ef67eb7da	keycloak-services@20.0.5	26.6.2

Open the chart page →

7,081

opencloudjacobcolvin

1 of 13 See more

opencloud jacobcolvin 0.2.3

1 of the 13 container images this version deploys carry CVE-2026-7507.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :26.1.4	044a457e0498	keycloak-services@26.1.4	26.6.2

Open the chart page →

46,106

keycloakmt190502

1 of 3 See more

keycloak mt190502 1.4.6

1 of the 3 container images this version deploys carry CVE-2026-7507.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :26.5.6	8d44614c7479	keycloak-services@26.5.6	26.6.2

Open the chart page →

2,728

1 of 29 See more

incore ncsa 1.38.0

1 of the 29 container images this version deploys carry CVE-2026-7507.

Container image	Digest	Package	Fixed in
bitnamilegacy/keycloak :24.0.4	cc599cbd15ff	keycloak-services@24.0.4	26.6.2

Open the chart page →

15,997

keycloakpascaliske

1 of 1 See more

keycloak pascaliske 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-7507.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :26.0.7	4388e2379b7e	keycloak-services@26.0.7	26.6.2

Open the chart page →

2,248

keycloaksb-helm-charts

1 of 2 See more

keycloak sb-helm-charts 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-7507.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :26.0.6	a93d22e13b86	keycloak-services@26.0.6	26.6.2

Open the chart page →

2,560

keycloaksikalabs

1 of 1 See more

keycloak sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-7507.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :26.3.3	6a7217a100bd	keycloak-services@26.3.3	26.6.2

Open the chart page →

1,850

simple-keycloaksikalabs

1 of 1 See more

simple-keycloak sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-7507.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0.1	8830f76112b6	keycloak-services@20.0.1	26.6.2

Open the chart page →

6,614

wonder-mesh-netstrrl-helm

1 of 3 See more

wonder-mesh-net strrl-helm 2026.629.0

1 of the 3 container images this version deploys carry CVE-2026-7507.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :26.0	09a381c715ab	keycloak-services@26.0.8	26.6.2

Open the chart page →

5,447

opencloudunxwares

1 of 13 See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2026-7507.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :26.1.4	044a457e0498	keycloak-services@26.1.4	26.6.2

Open the chart page →

46,106

webhookie-allwebhookie

1 of 3 See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-7507.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :14.0.0	3029dc0f1d38	keycloak-services@14.0.0	26.6.2

Open the chart page →

29,388

keycloakwiremind

1 of 2 See more

keycloak wiremind 25.3.1

1 of the 2 container images this version deploys carry CVE-2026-7507.

Container image	Digest	Package	Fixed in
ghcr.io/wiremind/bitnami/keycloak :26.5.0-debian-12-r3	8622ea9e43c0	keycloak-services@26.5.0	26.6.2

Open the chart page →

8,196

1 of 1 See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-7507.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0.3	b8f2a453a17a	keycloak-services@20.0.3	26.6.2

Open the chart page →

6,186

Container images carrying it

21 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
quay.io/keycloak/keycloak :26.1.4	044a457e0498	keycloak-services@26.1.4	26.6.2	2
quay.io/keycloak/keycloak :20.0	054ef67eb7da	keycloak-services@20.0.5	26.6.2	2
quay.io/keycloak/keycloak :17.0.1-legacy	68f9f38c8f30	keycloak-services@17.0.1	26.6.2	2
assistiot/identity-manager_kc :latest	0df4b4fa899a	keycloak-services@19.0.3	26.6.2	1
bitnamilegacy/keycloak :20.0.5	cb04e49e6eb1	keycloak-services@20.0.5	26.6.2	1
bitnamilegacy/keycloak :24.0.4	cc599cbd15ff	keycloak-services@24.0.4	26.6.2	1
bitnamilegacy/keycloak :26.3.3-debian-12-r0	da3df0976a9f	keycloak-services@26.3.3	26.6.2	1
ghcr.io/wiremind/bitnami/keycloak :26.5.0-debian-12-r3	8622ea9e43c0	keycloak-services@26.5.0	26.6.2	1
ghcr.io/wundergraph/cosmo/keycloak :0.13.0	b37408461b9b	keycloak-services@26.5.4	26.6.2	1
quay.io/keycloak/keycloak :26.0	09a381c715ab	keycloak-services@26.0.8	26.6.2	1
quay.io/keycloak/keycloak :14.0.0	3029dc0f1d38	keycloak-services@14.0.0	26.6.2	1
quay.io/keycloak/keycloak :26.0.7	4388e2379b7e	keycloak-services@26.0.7	26.6.2	1
quay.io/keycloak/keycloak :26.5	45ae20191531	keycloak-services@26.5.7	26.6.2	1
quay.io/keycloak/keycloak :24.0.3	4d6f22991266	keycloak-services@24.0.3	26.6.2	1
quay.io/keycloak/keycloak :23.0.3	4f72a5b0c076	keycloak-services@23.0.3	26.6.2	1
quay.io/keycloak/keycloak :20.0.2	5227edcc7595	keycloak-services@20.0.2	26.6.2	1
quay.io/keycloak/keycloak :26.3.3	6a7217a100bd	keycloak-services@26.3.3	26.6.2	1
quay.io/keycloak/keycloak :20.0.1	8830f76112b6	keycloak-services@20.0.1	26.6.2	1
quay.io/keycloak/keycloak :26.5.6	8d44614c7479	keycloak-services@26.5.6	26.6.2	1
quay.io/keycloak/keycloak :26.0.6	a93d22e13b86	keycloak-services@26.0.6	26.6.2	1
quay.io/keycloak/keycloak :20.0.3	b8f2a453a17a	keycloak-services@20.0.3	26.6.2	1