A flaw was found in Keycloak. Keycloak does not immediately enforce the disabling of the "Remember Me" realm setting on existing user sessions. Sessions created while "Remember Me" was active retain their extended session lifetime until they expire, overriding the administrator's recent security configuration change. This is a logic flaw in session management increases the potential window for successful session hijacking or unauthorized long-term access persistence. The flaw lies in the session expiration logic relying on the session-local "remember-me" flag without validating the current realm-level configuration.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A flaw was found in Keycloak. Keycloak does not immediately enforce the disabling of the "Remember Me"
    realm setting on existing user sessions. Sessions created while "Remember Me" was active retain their
    extended session lifetime until they expire, overriding the administrator's recent security configuration
    change. This is a logic flaw in session management increases the potential window for successful session
    hijacking or unauthorized long-term access persistence. The flaw lies in the session expiration logic
    relying on the session-local "remember-me" flag without validating the current realm-level configuration.
    (CVE-2025-11429)

ID	Name	Product	Family	Type	Severity
457971	Echo: keycloak-25: security update to 25.0.6+e1org.keycloak:keycloak-services: security update to 26.2.11	Tenable Cloud Security	Echo Local Security Checks	Local	medium
457971	Echo: keycloak-25: security update to 25.0.6+e1org.keycloak:keycloak-services: security update to 26.2.11	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	medium
435768	SCA: security update for org.keycloak:keycloak-services (GHSA-64w3-5q9m-68xf)	Tenable Cloud Security	SCA Checks	Local	medium
435768	SCA: security update for org.keycloak:keycloak-services (GHSA-64w3-5q9m-68xf)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium

Detections

Analytics

CVE-2025-11429

medium

Tenable Plugins

medium

medium

medium

medium