CVE-2026-75759
Description
A flaw was found in oidcc. This vulnerability allows an unauthenticated attacker to impersonate an arbitrary user. The oidcc component improperly verifies cryptographic signatures in encrypted ID tokens or JSON Web Application Response (JARM) responses. By exploiting this, an attacker can forge tokens with arbitrary user identifiers, bypassing expected security checks.
Statement
Red Hat rates this vulnerability as having an Important severity because an unauthenticated remote attacker can forge authentication claims to assume the identity of arbitrary accounts. Although successful exploitation requires the relying party to process encrypted tokens or responses and involves browser front-channel interactions, bypassing signature validation poses a severe threat to authentication integrity and confidentiality. Deployments configured to accept only standard, unencrypted signed tokens are not susceptible to this flaw.
Understanding the Weakness (CWE)
Access Control,Integrity,Confidentiality
Technical Impact: Gain Privileges or Assume Identity; Modify Application Data; Execute Unauthorized Code or Commands
An attacker could gain access to sensitive data and possibly execute unauthorized code.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
