Vulnetix
Try Vulnetix Request Demo
CVE-2025-10043 PUBLISHED

A path traversal validation flaw exists in Keycloak’s vault key handling on Windows. The previous fix for CVE-2024-10492 did not account for the Windows file separator (\). As a result, a high-privilege administrator could probe for the existence of files outside the expected realm context through crafted vault secret lookups. This is a platform-specific variant/incomplete fix of CVE-2024-10492.

EPSS 0.04% · 10.9th percentile

Risk Scores

EPSS Score
0.04%
10.9th percentile

Timeline

References

Open in Interactive Console →