A vulnerability in the backchannel logout endpoint of the keycloak-services component in the Red Hat Build of Keycloak allows logout requests without cryptographic signatures to be accepted if an OIDC identity provider is configured to skip signature validation. This flaw can be exploited by an attacker with knowledge of certain user session details to forcibly log out the user, causing potential disruption. The issue has a low severity rating and a CVSS score of 3.7.