This advisory addresses a moderate severity vulnerability (CVE-2025-7365) in Red Hat build of Keycloak 26.0.13, specifically a phishing attack vector via the email verification step during the first login flow. Keycloak provides authentication and single sign-on capabilities for various applications and services. The update involves new container images for Keycloak and its Operator on OpenShift, mitigating the phishing risk. The advisory references multiple CVEs but highlights CVE-2025-7365 as the primary security fix. No CVSS score is provided. The vendor recommends backing up existing installations before updating.

The vulnerability allows an attacker to conduct phishing attacks exploiting the email verification step in the initial login process, potentially deceiving users during authentication. This could lead to unauthorized access or credential compromise if users are tricked. The issue affects deployments of Red Hat build of Keycloak 26.0.13 used within OpenShift Container Platform environments. No known exploits in the wild have been reported at this time.

Red Hat has released updated container images for Red Hat build of Keycloak 26.0.13 and its Operator to address this vulnerability. Users should apply these updated images to their OpenShift deployments. Before updating, it is recommended to back up all existing installations, including applications, configuration files, and databases. Patch status is confirmed by the vendor advisory indicating that updated images are available. No additional mitigations are specified beyond applying the update.