CVE-2026-0707 | Keycloak on Red Hat Authorization Header incorrect behavior order: authorization before parsing and canonicalization (WID-SEC-2026-0034)

A vulnerability, which was classified as problematic, has been found in Keycloak on Red Hat. This impacts an unknown function of the component Authorization Header Handler. The manipulation leads to incorrect behavior order: authorization before parsing and canonicalization. This vulnerability is traded as CVE-2026-0707. It is possible to initiate the attack remotely. There is no exploit available.